Privacy.

Forma is operated by PocketLayer Inc. This page explains what stays on your device, what you choose to share, and how to manage your information.

Effective September 20, 2026

Your account

Creating an account shares your email address and account identifier with our authentication provider, Supabase. Your chosen username, profile preferences and optional profile photo are stored with your account. If you use Google sign-in, Google supplies your name, email, account identifier and profile picture when available. We do not request your Gmail messages, contacts, calendar or Google Drive.

Forma uses this information for sign-in, account security and the features you choose. Verification and password-reset emails are delivered through Resend. That service processes the destination address, email content and delivery information. Promotional emails require a separate opt-in; a verification email does not subscribe you to marketing.

Your records and cloud backup

Your cabinet, routines, entries, notes, photos and settings are saved on your device. They are not automatically posted to Community. If you choose Save latest backup, Forma sends a copy to your account through Supabase and enables automatic updates while Forma is open. That preference can resume when you reopen the app with the same account. You can turn automatic backup off in Cloud backup.

The backup includes your tracking data, photos and settings. AI conversations and sign-in credentials are kept separately. Backups are protected in transit and by account access controls; Forma does not provide end-to-end encryption for them. Turning automatic backup off stops future updates but does not erase a copy already saved.

Apple Health access is optional and limited to the categories you authorize. You can change permissions in Apple Health or Settings. Forma does not use HealthKit information for advertising. Device-only information is not sent to our servers unless you choose a connected feature such as backup or a personal report.

Community and moderation

Community requires a verified account and an active verified Forma membership. It is not a public website feed. Approved posts, replies, attachments and your selected display identity can be seen by other eligible members. Pending posts are visible to their author and moderators. Your email is not displayed as your Community identity. Other members may copy content you share, so avoid posting information you want to keep private.

Reports, blocking preferences and moderation decisions are stored to enforce Community rules. Authorized moderators can review content. When automated review is triggered, the reported caption and supported attached images or animation frames are sent through OpenRouter to its selected model provider. These review requests do not attach your private tracking history or account email. Automated review can fail or defer to a person; it does not replace human moderation.

If you search for or view GIFs, your device contacts GIPHY directly. GIPHY receives search terms, requested GIF identifiers and technical request information such as your network address. Forma stores the selected GIF identifier with your post, not a copy of GIPHY’s media. We do not send your Forma account identifier or health history to GIPHY. Its privacy policy describes its handling of requests.

Purchases

Apple processes App Store payments; Forma does not receive your card details. Subscription verification sends the signed transaction to our backend and Apple. We retain the subscription identifier, account association, verification time and expiry to manage paid access and prevent a purchase from being claimed by another account. Cancelling or deleting Forma does not cancel an Apple subscription; manage it in your Apple subscription settings.

AI and label scanning

When you use connected Ask Forma features, the messages and recent conversation context needed for your request go through Forma’s assistant service to OpenRouter and its selected model provider. Web searches may send relevant terms to a search provider. Personal reports explain which summaries or notes will be included before you generate them. A subscription does not automatically share your history.

Label scanning reads the photo on your device. If you request AI assistance, extracted label text is sent to the AI service; the scanner photo is not uploaded by that feature. Providers process submitted content under their own policies, including OpenRouter’s privacy policy. Availability of connected features depends on the app’s current configuration.

Notifications, widgets and Live Activities

Reminders are scheduled on your device. Widgets and Live Activities can display peptide names, times and supply information on your Home Screen, Lock Screen or Dynamic Island. These details may be visible to someone looking at your device. Choose whether to enable these features and control notification previews in iPhone Settings. App lock does not hide a widget or a notification preview.

Website questions and early access

The website’s AI question box sends your question and up to three recent exchanges through Cloudflare to OpenRouter and its selected model provider. It does not attach app records or account details. Avoid entering personal health information. The conversation stays in page memory until you clear it or leave. Forma does not store FAQ questions or replies in its database. A keyed hash of the network address supports short-lived request limits.

Joining the early-access list shares your email, signup time and consent for invitations and launch news. No health records are collected by that form. Contact us to leave the list; marketing messages include an opt-out method. Cloudflare hosts the website, and Google Fonts serves its fonts.

Service providers and technical information

Hosting, authentication and delivery providers process request times, network addresses, delivery failures and security logs to operate and protect the service. Forma’s waitlist and website FAQ limiters use keyed network-address hashes. Account request limits use an account identifier and short-lived counters. We do not add advertising identifiers or cross-app advertising trackers to Forma.

Service providers may process information outside your country. Their own backup, logging and retention practices apply, including those described by Supabase, Resend, and Cloudflare. We do not sell your tracking records or Google account information.

Retention, deletion and support

Account information and cloud content are retained while needed to provide the account. Deleting your account in Forma removes its cloud backup, profile, posts, replies and associated attachments from the active app database. Your local records remain until you remove them separately. You can export your local records in the app. Previously downloaded or copied content held by another person is outside Forma’s control.

Expired request-limit records are cleared during later processing. Service-provider backups and security logs may remain for their configured retention periods or legal obligations; account deletion does not guarantee immediate removal from every provider backup or log.

For access, correction, deletion, waitlist removal or other privacy questions, email [email protected]. We may verify account ownership before acting. Support correspondence is processed through our business email services, including Gmail and Brevo, and retained as needed to resolve your request.

Changes

We revise the date above when this policy changes. Material changes will be communicated through the app or another appropriate channel.