Privacy policy

Who is responsible for the data

The data controller is the FormDaily team. For anything about your data, write to privacidade@formdaily.app — we reply within 2 business days.

Data we collect

We collect only what the app needs to work:

• Account: name, email and password (stored only as a hash). If you sign in with Apple or Google we receive the name and email the provider sends — never your password.
• Training: exercises, sets, loads, reps, duration and session history.
• Progress: circumferences, body composition, weight and the progress photos you choose to record.
• Schedule: agreed times, reschedules and cancellations.
• Health (optional): with your permission we read steps, heart rate, resting heart rate and sleep from the iPhone Health app and synchronize daily summaries with your account. We do not write data to Health. The permission is yours and can be revoked in iPhone Settings at any time.
• Voice (optional): when you log sets by voice, the audio is transcribed to fill in sets and loads. We do not keep the audio.
• Usage and crashes: technical data about how the app runs and errors, so we can find and fix problems.
• Website email list: if you sign up for launch updates we store your name, email and whether you're a trainer or a student.

Why we use each piece of data

• To provide the service: show the workout, log the session, keep the history and the schedule.
• To track progress: calculate attendance and progress, and produce FormDaily Insight observations.
• To communicate: operational notices (reschedule, invite, reminder) and, if you asked for them, launch updates.
• For security and improvement: spot abuse, fix defects and understand what needs to get better.

What your trainer sees, and what your student sees

FormDaily exists so two people can agree on a training plan, so some data is shared on purpose — and only between the two of you.

When you accept a trainer's invitation, they can see your workouts, session history, attendance and the progress records you created in the app. Your trainer never sees your password, conversations outside the app, or data from other trainers.

A student sees the prescribed workout, their own history and their own progress. A student never sees another student's data.

Ending the relationship with a trainer stops that sharing. The history of sessions that already happened stays in their professional record, as it would with any coaching relationship.

FormDaily Insight and the use of AI

For new accounts, AI starts disabled.

FormDaily Insight analyses training data to spot patterns and suggest adjustments. Every observation shows the data behind it; the decision is always the trainer’s, who accepts, edits or rejects it.

No automated Insight decision affects you without a person reviewing it. We do not use your data to train third-party models.

Who we share with

We do not sell data and we do not run advertising. We share only with the providers the service needs, and only what they need:

• Server and database infrastructure, to host the application.
• Resend, to send email (product notices and the launch-updates list).
• Apple and Google, when you choose to sign in with their account.
• Authorities, where there is a legal obligation.

How long we keep it

While your account exists we keep its data. After a deletion request we delete the account and its data within 30 days, except what the law requires us to keep (for example, tax records of payments).

For the email list, you leave in one click through the unsubscribe link in every send, and your address comes off the list.

Your rights

Brazil’s LGPD — and equivalent rights elsewhere — let you confirm whether we process your data, access it, correct it, request portability, request deletion, and withdraw consent given for optional uses such as Health app access.

• Export: workouts, history and measurements export to a file at any time, from the app itself.
• Delete: under Profile in the app, or by writing to privacidade@formdaily.app from the account’s email.
• Correct or understand: write to privacidade@formdaily.app.

Security

Traffic is encrypted in transit, passwords are stored only as hashes, and access to production data is restricted to the people who need it to run the service. No system is immune to incidents: if one affects your data, we will tell you and the relevant authority as the law requires.

Children and teenagers

The minimum age for an account is 13. Between 13 and 18, use must be authorized by your legal guardian. If we identify an account below the minimum age, it is removed.

Changes to this policy

When this policy changes we update the date at the top. Material changes are emailed to account holders before they take effect.