Privacy Policy

01Who we are

Forme ("Forme", "we", "us") is a social accountability app operated by Forme ApS, based in Denmark. This policy explains how we handle personal data when you use the Forme mobile app or visit formeapp.io. We act as the data controller under the EU General Data Protection Regulation (GDPR).

02What we collect

We only collect what we need to make Forme work.

Account information

• Name and username you choose
• Email address (used for login and essential notifications)
• Date of birth (used to verify you meet our minimum age, see Children). Stored privately and never shown to other users.
• Profile photo, if you upload one
• Date you joined and time zone

Content you create

• Commitments you set, along with your chosen audience (public, friends, or a specific circle)
• Progress logs, photos, and honest reviews you write
• Reactions, comments, and chats with other users
• If you connect Strava, the activities you choose to import (distance, pace, duration, and route)

Device and diagnostics

• Device model, operating system version, and app version
• Crash reports and basic performance data
• Product usage events (which features you use, when you check in), linked to your account, so we can understand and improve Forme
• Approximate region (derived from IP address) for service reliability

We do not collect precise location, contacts, health data, advertising identifiers, or browsing activity outside Forme.

03How we use it

• To provide the core product, showing your commitments to the people you chose, keeping your streak, storing your reviews.
• To send essential notifications (a new comment, a commitment check-in, security alerts). You can disable non-essential notifications in settings.
• To diagnose and fix crashes and bugs.
• To protect against abuse, spam, and violations of our Terms.
• To comply with legal obligations when required.

We do not use your data to train advertising profiles, and we do not show ads.

04Who we share it with

We share data only with trusted service providers (sub-processors) that help us run Forme, and only to the extent they need it:

• Cloud hosting, to store your account and content on secure servers in the EU.
• Crash reporting, to collect anonymised crash traces so we can fix problems.
• Product analytics, to understand which features are used so we can improve the app. This is tied to your account identifier, never sold, and never shared with advertisers.
• Email delivery, to send transactional emails like password resets.
• Push notifications, to deliver notifications through Apple and Google.
• Fitness data import, only if you connect Strava, to bring the activities you choose into your check-ins.

We never sell your personal data. We never share it with advertisers. We will only disclose it to authorities when we are legally required to do so.

05How long we keep it

We keep your account data for as long as your account is active. Content you post stays until you or the owner of the shared thread deletes it. When you delete your account, we permanently erase your personal data within 30 days. The only thing we may retain is anonymous diagnostic data that is no longer linked to your account.

06Your rights (EU / UK)

If you are in the EU or UK, GDPR gives you the right to:

• Access, request a copy of the data we hold about you.
• Correct, fix anything that's wrong.
• Delete, have your personal data erased ("right to be forgotten").
• Export, receive your data in a portable format.
• Object, ask us to stop processing in certain cases.
• Complain, file a complaint with your local data protection authority (in Denmark, Datatilsynet).

Email hello@formeapp.io and we'll respond within 30 days.

07Your rights (United States)

We extend the same core privacy rights to every Forme user, wherever they live. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, or any other US state with a consumer privacy law, you have the right to:

• Know what personal information we have collected about you, the categories of sources, the purposes for collection, and any categories of third parties we share it with. The "What we collect" and "Who we share it with" sections above cover this for every user.
• Access a copy of the personal information we hold about you.
• Correct inaccurate information.
• Delete the personal information we hold about you, subject to narrow legal exceptions.
• Opt out of "sale" or "sharing" of personal information. We do not sell your personal information for money or other value, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of, and that is why you will not see a "Do Not Sell or Share My Personal Information" link on this site.
• Limit the use of sensitive personal information. We do not use sensitive personal information to infer characteristics about you or for advertising.
• Non-discrimination. We will never deny you service, change pricing, or reduce quality because you exercised a privacy right.

Your data is stored on servers in the European Union. By using Forme from outside the EU, you understand and agree that your personal information will be transferred to and stored in the EU, which has a strong privacy framework (GDPR) that often exceeds US state-law protections.

To exercise any of these rights, email hello@formeapp.io from the address on your account so we can verify you. We respond within 45 days, as required by US state law. You may also designate an authorised agent to make a request on your behalf, in which case we will ask for proof of authorisation.

08Deleting your account

You can delete your account and all associated personal data at any time, from inside the app:

1. Open your profile

   Tap your avatar in the top-left of any main screen.

2. Open Settings

   Tap the menu icon in the top-right of your profile to open the settings sheet.

3. Tap "Delete account"

   It's at the bottom of the settings sheet. Re-enter your password and type DELETE to confirm.

4. Confirm

   Your account is scheduled for deletion. Data is permanently erased within 30 days.

You can also request deletion by email at hello@formeapp.io. Include the email address on your account so we can verify the request.

09Children

Forme requires you to be at least 13 years old to use our service. In the European Economic Area, the United Kingdom, and Switzerland, the minimum age is 16, in line with the strictest reading of GDPR-K. We check this at registration by asking for your date of birth and applying the regional minimum based on the country your sign-up request comes from.

If an account is created that does not meet the minimum age, we refuse the sign-up and no profile is created. We do not knowingly collect personal data from anyone below the minimum age. If you believe an underage account exists, contact hello@formeapp.io and we will remove it.

Forme is not directed to children under 13. We comply with the Children's Online Privacy Protection Act (COPPA) by not knowingly collecting data from US users under 13.

10Security

We encrypt data in transit (TLS) and at rest. Access is restricted to a small number of employees on a need-to-know basis. No system is perfect; if a breach affects you, we will notify you and the relevant authority within 72 hours, as required by GDPR.

11Changes to this policy

If we make material changes, we will notify you in the app and by email before they take effect. The "Last updated" date above always reflects the current version.

12Contact