FormFit AIPrivacy policy
FormFit AI ("the app") is made and operated by Chetan Wadate, trading as Comps Geek, India ("we"). This policy explains what the app and this website do with information about you. We've tried to collect as little as we can.
The short version. Camera video and scan photos are processed on your device and never uploaded. On iPhone you can choose to save a set as a video to your own Photos; we never receive it. The AI coach runs on your device too. No ads and no cross-app tracking. Anonymous usage and crash data (no name, email, workouts, body data, video or photos) helps us improve the app and you can switch it off in Settings. If you create an account, a limited set of data is stored with Google Firebase: your profile (weight, height, age, goal and name) so it can follow you to a new phone, plus backup and social features if you use them. iCloud sync, if you use it, stays in your own iCloud account. You can delete all of it from inside the app.
1. What we collect, and why
| Data | Why | Where it lives |
|---|---|---|
| Camera video | To find your body pose and count reps | Processed live on your phone. Not uploaded. On iPhone, each set is also recorded to a temporary file on your phone (no sound) so you can save it to your Photos when the set ends; if you don't save it, it is deleted. A saved video goes only to your own Photos library; FormFit AI can add to Photos but cannot see your other photos. You can switch this off in Settings ▸ Offer to save sets as videos. |
| Body-scan photos (optional) | To estimate your shape and measurements | Analysed on your phone, then discarded. Not uploaded. |
| Profile: weight, height, age, optional gender, goal, units, daily goals, name | To estimate calories and tailor coaching. Gender can be "prefer not to say" | On your phone. If you sign in (Apple, Google or email), this profile is also saved in your private cloud space so it comes back on a new phone, even without Pro. Only you can read it, and it is removed when you delete your account |
| Workouts: sets, reps, form scores, calories, skeleton points for replay, weight and body measurements | Your history and progress | On your phone. Copied to your private cloud space only if you turn on backup |
| Account: sign-in ID, email and name from Apple or Google, or the email and password you choose (the password is handled by Firebase Authentication; we never see it) | To sign you in, back up your data and enable social features | Firebase Authentication (Google) |
| Social totals: display name, level, streak, weekly calories and minutes, average form score, feed posts, cheers, challenge membership and progress, live "working out now" status | Leaderboard, friends, feed and challenges | Cloud Firestore (Google), only while you choose to be visible |
| Apple Health: workouts (written), resting heart rate and steps (read) | To save your workouts and improve calorie estimates | Apple Health on your device. We never use it for advertising |
| Apple Watch: live heart rate during a workout | To show it on your wrist while you train | On your watch, for the length of the workout only. Not saved to Health by us, not uploaded |
| AI coach notes | Short feedback after a workout | Generated on your device by Apple Intelligence from your totals. Nothing leaves the device |
| iCloud sync (optional, on by default) | To keep your workouts, weight, measurements, custom exercises and profile in step across your Apple devices | Your own private iCloud storage (Apple). We can't read it |
| Purchases | To unlock Pro | Handled by Apple. We never see your payment details |
| Anonymous usage and crash data: which screens and features are used (for example "workout completed", "paywall viewed"), rough buckets rather than exact numbers, app version, device model, OS version, country, and crash reports. No name, email, workouts, measurements, video or photos | To see which features people use, improve the app and fix crashes | Firebase Analytics and Crashlytics (Google), tied to a random app-instance ID, not to you or your account. No advertising ID. On by default, except in the EU, EEA, UK and Switzerland, where it stays off until you agree in a one-time question. You can turn it on or off any time in Settings ▸ Privacy ▸ Share anonymous usage data |
| Notification settings | Reminders you opt into | On your phone. Reminders are scheduled locally |
We do not collect precise location, contacts, advertising identifiers or browsing history, and we do not sell personal data.
2. The app on each platform
- iPhone, iPad and Apple Watch: as described above. The Apple Watch app only shows your workout and heart rate on your wrist while you train; it does not upload anything itself.
- Android (when available): the same features and the same account system. Purchases are handled by Google Play (we never see payment details). Workouts can be written to and read from Health Connect if you allow it. The AI coach runs on your device using Gemini Nano (through Google's ML Kit) on phones that support it, and is hidden on phones that don't. Nothing is sent to an AI service.
- AI features: the AI coach works from your own totals and averages (reps, form scores, pace) and never sees video, photos or pose points. We do not use your data to train AI models, and nothing is shared with an AI provider.
3. Social features and who can see what
Social features are off until you opt in. When you're visible to friends or globally, others can see your display name and the totals above. They never see your video, photos, weight, height or body measurements. You can change your visibility or leave at any time in the app.
Invite links: when you open a friend's invite link, our website only reads the invite code from the link in your browser; it does not set cookies or track you. On iPhone the page copies the invite link to your clipboard so the app can find it after you install, and on first launch the app checks whether the clipboard holds a FormFit invite link (iOS may ask your permission to paste), uses it once and clears it. On Android the app asks Google Play for the install referrer, which holds only the invite code from the link. Neither is used for advertising.
If you use the invite feature, we store a small record under your account: your ID, the ID of the person who invited you and the date. Workout plan progress, your own routines and any weights you enter are saved on your device and, if you turn on cloud sync, in your own cloud copy. The invite record is kept after you delete your account (two random IDs and a date), so the same reward can't be claimed again.
If you report a person or a post, we store your account ID, the other person's account ID and display name, the reason, your optional note and the time, so we can review it. Reports are not visible to anyone in the app. The list of people you block is stored in your account so it follows you to a new phone, and is visible only to you. Both are deleted with your account (a report you filed may be kept for as long as needed to act on it).
4. Who processes data for us
- Google Firebase (Authentication, Cloud Firestore, Analytics, Crashlytics, Hosting): stores account and cloud data and serves this website. Google may process data in the United States and other countries, so your data may be transferred outside your country; we rely on the safeguards those providers offer for that.
- Sign in with Apple and Google Sign-In: used only to authenticate you.
- Google (Google Play Billing, Health Connect, Gemini Nano on Android): purchases and Health access on Android, and on-device AI. Data stays on your device except as described above.
- Apple (App Store, StoreKit, HealthKit, iCloud, Apple Intelligence, notifications): purchases, Health access, device sync, on-device AI and the app's distribution.
The app contains no advertising SDKs. The third-party SDKs are Firebase (Auth, Firestore, Analytics and Crashlytics) and Google Sign-In. Analytics and crash reports are anonymous and do not use the advertising ID; you can turn them off at any time in Settings ▸ Privacy. The AI coach uses Apple's on-device model; no AI provider receives your data.
5. Legal bases and consent
We process data to provide the service you asked for (account, backup, social), with your consent where you turn on an optional feature (Health access, notifications, social visibility, measurement tracking), for our legitimate interest in understanding which features are used and fixing crashes (anonymous usage and crash data, which you can switch off in the app at any time), and for keeping the service secure. You can withdraw consent at any time by turning the feature off in the app or in your device settings.
6. How long we keep it
Data on your phone stays until you delete it or the app. Cloud data stays while your account exists. When you delete your account in the app we remove your cloud data and sign-in record straight away, apart from short-lived backups that Google rotates out. If you ask us to delete by email we aim to finish within 30 days.
7. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023, and the GDPR), you can ask to access, correct, export or delete your data, withdraw consent, and complain to a regulator. Most of this you can do yourself:
- Export: Profile ▸ Settings ▸ Export my data.
- Delete: Profile ▸ Settings ▸ Delete account & all data. See Delete your data.
- Anything else: email support@compsgeek.in.
8. Children
FormFit AI is not directed at children under 13 (or the higher minimum age in your country) and we do not knowingly collect their data. Before anyone can create or sign in to an account, the app asks for a birth month and year. That answer is kept only on your device, is never sent to us, and is used only for this check. If it shows the person is under 13, the app does not offer accounts, and anonymous usage and crash reports are switched off for that device; the rest of the app keeps working on the device. If you believe a child has created an account, email us and we will delete it. Under-18s should use the app with a parent or guardian's agreement.
9. Security
Cloud data is protected in transit and at rest by Google, access rules limit each person to their own private data, and iCloud data is protected by Apple. We store no payment details. No system is perfectly secure, so we can't promise absolute security. If a breach affecting you occurs we will tell you as the law requires.
10. This website
This website sets no cookies, runs no analytics and loads no third-party scripts or fonts. Like any web host, Firebase Hosting keeps standard server logs (such as IP address and page requested) for security and operations. See the cookie policy.
11. Changes
If we change this policy in a way that matters we'll update the date above and, for material changes, tell you in the app.
12. Contact and grievances
Chetan Wadate (Comps Geek), India · support@compsgeek.in. This is also our grievance contact; we aim to reply within 3 business days.