FORM
Privacy policy
The short version
- Everything you log in FORM stays on your phone. We have no account server, so we never see your sleep, battery check-ins, workouts, sport and games, weight, skin answers, focus, photos or notes. What FORM learns about you (for example how games affect your sleep) is worked out on your phone from those logs and stays there. For roleplay it keeps only what kind each practice line was (a yes or no question, say), never the words.
- Three things can leave your phone, and only if you turn them on: notifications, Mates, and WHOOP. In the claude.ai copy of FORM there is a fourth, the coach. Each one tells you what goes where before you say yes.
- No ads, no analytics, no trackers, and we never sell or rent anything about you.
- You can download everything or delete everything from inside the app, any time: You, then Privacy and your data.
- FORM is for people aged 13 and over. Under 16, a parent or guardian has to say yes before anything leaves the phone.
- FORM is a wellness app, not a medical service. It does not diagnose or treat anything.
Who we are
FORM is made by two developers, Byron and Daniel, in New South Wales, Australia. "We" in this policy means the two of us. We are responsible for the small amount of personal information FORM handles off your phone.
Contact: the contact form at the bottom of this page, or You, then Privacy and your data, inside the app. You can use it for questions, to ask what we hold, to correct or delete it, or to complain. We acknowledge every message within 30 days and answer within 45 days at the latest.
What stays on your phone
FORM stores what you enter in your browser's storage on your phone (in the iPhone app, in the app's own storage). That includes your first name, email and a scrambled form of your password if you make a login, your month and year of birth, goals, training plan, sleep, battery, energy and stress check-ins, workouts and lifts, body weight and measurements, skin type and breakout answers, progress photos, journal notes, the products you mark as yours, and your settings.
We cannot see or reach any of it. It is not sent to us or anyone else. Because it never leaves the phone, we do not collect it in the legal sense, but we still built FORM as if every privacy law applied to it: you can export it as a file and delete it whenever you want.
If you import an Apple Health export or a Strong or Hevy file, the file is read on your phone and the results are kept on your phone. The file is never uploaded.
What can leave your phone, and only if you turn it on
| Feature | What leaves | Where it goes | How long it is kept |
|---|---|---|---|
| Notifications | A notification address created by your phone's browser, the two times you pick, and your time zone. No health data, nothing you log, not your name. | FORM's notification server, run on Cloudflare. Apple, Google or Mozilla deliver the message to your phone. | Until you turn notifications off or reset FORM, and deleted automatically 180 days after you last open FORM. |
| Mates | Your first name, an age band (under 16, under 18 or adult), your 7 digit code, the groups you are in, what you write in group chats, your votes, and one number a day for each challenge (sessions, tasks ticked, nights of 7 hours, protein days, steps, talk reps, screens off on time, days on FORM). Not what you ticked, your sleep hours or anything else. Your phone keeps a secret key; we store only a scrambled copy of it. | FORM's server on Cloudflare (servers worldwide, including the US), and the people in your groups. Reported chat lines go to the FORM team. | Chat lines 90 days, daily numbers 60 days, invites 30 days. Leave a group and you come off it. Turning Mates off or resetting deletes all of it. A year without opening Mates deletes it too. |
| WHOOP | FORM asks WHOOP for last night's recovery, heart rate variability, resting heart rate, sleep and strain. Your WHOOP sign-in keys are kept on your phone. | The data passes through FORM's small server on Cloudflare on its way from WHOOP to your phone. The server keeps none of it and keeps no logs of it. | The server: not kept at all. Your phone: 30 days, then FORM deletes it. Disconnecting asks WHOOP to cancel FORM's access. |
| The coach (claude.ai copy only) | What you type to the coach, plus a short summary: first name, goals, focus, sport week, today's plan and band, sleep, recent battery check-ins and lifts, and what FORM has noticed from your check-ins and plan. Never WHOOP or Apple Health data, photos or your password. | Claude, made by Anthropic, through your own claude.ai account. The phone app has no coach. | FORM keeps nothing. Anthropic handles it under your claude.ai account and Anthropic's privacy policy. |
| Haircut try-on | Nothing, from FORM. FORM copies a few words for you to paste into your own ChatGPT with a selfie you choose to send. If you add the photo ChatGPT makes back into FORM, it stays on your phone. | Only where you send it yourself: OpenAI's ChatGPT (US), under your own ChatGPT account and OpenAI's terms (13 and over, and a parent's permission under 18). | FORM keeps nothing off the phone. A photo you add back stays on your phone until you remove it, turn the try-on off or reset FORM. |
If you use the contact form, your message, its topic and any reply address you add go to FORM's notification server and onto our private team board (both run on Cloudflare), so we can answer. We keep them for a year, then delete them.
Every time anyone opens FORM, Cloudflare, who host the app, receive your internet (IP) address and basic browser details, the same as for any website, to deliver the page and protect it from attacks. We do not use this to identify or track you. Our servers count requests per address for a minute to stop abuse, and do not store addresses.
The waitlist (getformapp.pages.dev)
If you join the waitlist we keep your email address, your age band (13 to 15, 16 to 17, 18 to 24 or 25 or older), whether a parent or guardian said yes (for 13 to 15), the referral code of whoever sent you the link, how many people joined with your link, and a scrambled copy of your internet address so we can stop spam sign ups. It is stored on FORM's server on Cloudflare (servers worldwide, including the US).
We use it only to send you a beta invite and tell you when FORM launches. We do not sell it, share it or add you to anything else. The person whose link you used sees nothing about you, only that their count went up. Take yourself off with the link on the waitlist page (on the same browser), or ask us with the form below, and it is deleted straight away. If FORM never launches, we delete the list.
Why we use it, and the legal basis
- To run the features you turn on: sending your two reminders, running your Mates groups (the weekly table, the vote and the chat), and bringing your WHOOP night into your plan.
- Our legal basis is your consent, which you give on the screen that appears before each feature switches on, and which you can withdraw at any time by turning the feature off. For health information (WHOOP data), it is your explicit consent.
- Hosting logs and abuse limits are kept for our legitimate interest in keeping FORM secure and working.
We never use your information for advertising, marketing, profiling or selling, and never to train an AI. We do not use your location.
Health data, Apple Health and WHOOP
In the FORM iPhone app, with your permission through Apple's own Health prompt, FORM reads sleep, workouts, steps, body weight, and the protein and food energy that food apps like Cal AI log, from Apple Health. FORM writes nothing to Apple Health. What it reads stays on your phone, is never sent to us, to the coach, to your mates or to anyone else, is never used for advertising, and is kept out of iCloud backups. You can stop it at any time in Settings, Health, Data Access and Devices, or with Disconnect in FORM.
WHOOP data is handled as described above and is never shared with your mates or the coach. FORM is not made, endorsed or sponsored by WHOOP or Apple.
If you live in Washington, Nevada or another place with its own consumer health data law, also read our consumer health data privacy policy.
Product picks and suggestions
FORM suggests a training plan, a daily band and skincare products from what you tell it, using fixed rules written by us. A person did not review each suggestion, and none of it has a legal or similarly significant effect on you. Nobody pays us to list a product and there are no affiliate links. Medicines are shown the same way to everyone with the words "ask your pharmacist", and are never picked from your answers.
Ages
FORM is for people aged 13 and over and asks for your month and year of birth before you start. If you are under 13 you cannot use it, and nothing is saved. If you are under 16, a parent or guardian has to confirm before anything leaves your phone. For everyone under 18 the most private settings are on by default: every feature that sends anything off the phone starts switched off, there is no location, no profiling, no public profile and no feed.
If you think a child under 13 has used FORM, contact us and we will help delete anything held off the phone.
Your rights and controls
- See and download it: You, then Privacy and your data, then Download my data, gives you everything FORM holds about you as a file you can keep or take elsewhere.
- Correct it: edit anything in the app. For anything on our servers, turn the feature off and on again, or contact us.
- Delete it: You, then Delete everything, wipes your phone and removes your notification record, your Mates (groups, chat lines, votes and numbers) and your place in any pact from our servers, and asks WHOOP to cancel access. Uninstalling FORM or clearing your browser data also deletes what is on the phone.
- Withdraw consent: turn the feature off. It stops straight away and its data is deleted as described above.
- Complain: contact us first if you can. You can also complain to your privacy regulator: in Australia the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992), in the UK the Information Commissioner's Office (ico.org.uk), in the EU your national data protection authority, in Canada the Office of the Privacy Commissioner (priv.gc.ca).
We do not charge for any of this and we will not treat you differently for using your rights.
Where it is stored
Cloudflare runs our servers in data centres around the world, including the United States; WHOOP and Apple and Google's notification services are based in the United States; Anthropic is in the United States. We chose providers with strong security and contracts that limit what they can do with data. Before turning a feature on you can see exactly which of them it uses.
Security and breaches
Everything travels encrypted (HTTPS). Notifications are end to end encrypted to your phone. Your password is never stored, only a salted, scrambled form of it on your phone. Our servers only accept requests from the FORM app, keep the minimum, and hold no developer keys in public code. If something ever goes wrong with data we hold, we will assess it straight away, tell the people affected and the regulator where the law requires (in Australia under the Notifiable Data Breaches scheme), and tell WHOOP within 48 hours if WHOOP data is involved.
Changes
If we change this policy we will update the date at the top and tell you in the app before the change affects anything you have turned on. We will ask again before using anything in a new way.
Not medical advice
FORM is for general health and wellbeing: sleep, training, skin care habits and confidence. It is not a medical device and it does not diagnose, treat, cure or prevent any condition. If something worries you or does not get better, see a GP. If you are not OK, call Lifeline on 13 11 14 or Kids Helpline on 1800 55 1800, any hour. In an emergency call 000.
Contact us
To see, correct or delete your data, ask a question, or make a complaint. It goes to the two of us on our private team board. Add an email or phone number if you want a reply; we use it only to answer you and delete the message after a year.