Privacy Policy
FormVidya ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FormVidya website, the FormVidya mobile application, and any related services (collectively, the "Services").
By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.
1. Information We Collect
Information you provide directly
- Account information — Name, email address, phone number, gender (optional), and year of birth when you create an account
- Profile information — Height, weight, and fitness-related data you enter for personalized exercise analysis
- Authentication data — Information used to verify your identity, including device identifiers, biometric capability status, and public keys for secure sign-in
- Communications — Information you provide when you contact us for support or feedback
Information collected automatically
- Device information — Device model, manufacturer, operating system version, and app version
- Usage data — How you interact with the Services, including features used and exercise sessions
- Exercise session data — The exercises you perform and the results of the analysis: repetition counts, form scores, session duration, and the history shown in the app. Section 1a explains what we receive from the camera and how long we keep it.
- Crash and diagnostic data (optional, off by default) — If you turn on “Send crash reports” in Settings, we collect technical details when the app crashes: the error and its stack trace, app and operating-system version, device model, and coarse device state such as free memory and battery level. These reports are identified only by a random identifier generated on your device for this purpose, which is not linked to your account. We design these reports to exclude your name, email address, phone number, exercise data, videos, messages, and authentication tokens, and we filter them before they are sent. This setting is off by default in the App Store and Google Play versions of the app; in pre-release test builds distributed to our own testers it is on by default. You can turn it off at any time in Settings.
Information from third parties
- Social login providers — If you sign in with Google or Apple, we receive your name, email address, and a unique identifier from those services. We do not receive your social media password.
1a. Workout Data
We do not keep a recording of your workout. When you work out with one phone, the camera images stay on it: the phone sends body-position points, not images, to our servers, where your form is analyzed. If you use a separate camera — a connected camera device, or a second phone set up as the camera — its pictures pass through our servers and are not stored.
The diagnostic record created automatically for every session is kept for 14 days from the start of that session, unless we keep a copy of a particular session longer to investigate a problem or improve our analysis. It holds those body-position points — about thirty points on your body, including your head and face — and the measurements taken from them, and no images. There is no setting to turn it off.
We use this data to provide, support and improve FormVidya. We may use de-identified workout data — body-position points with your account and device details removed, never video or images — to improve FormVidya for everyone. If you’d rather we didn’t, contact us at privacy@formvidya.com and we’ll exclude your data. We never sell your data. We share it only when you ask us to — for example, when you use Milo — or in the limited cases described in Section 4, such as when the law requires it.
Optional features
- Recording a workout — Recordings you choose to make are saved on your phone. We do not receive them.
- Sharing a session with a professional — You choose the session and confirm before anything is sent. When you connect with a professional, you explicitly choose what to share. You can choose to share all the details of the assignments your professional gives you, including results, the movement trace and video. Nothing is shared unless you choose it. To stop sharing a session, contact us at privacy@formvidya.com and we will remove it.
- Milo workout summary — If you turn it on for a workout, that workout’s results are sent to an AI provider to write the summary (Section 4).
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Services
- Create and manage your account
- Analyze what the camera sees during a workout and deliver real-time form feedback
- Investigate sessions that did not work properly and improve the accuracy of our form analysis (Section 1a)
- Send you verification codes and authentication messages by SMS or email
- Respond to your inquiries and support requests
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
3. SMS and Messaging
When you provide your phone number, you consent to receive SMS text messages from FormVidya for account verification and authentication.
- Types of messages: Account verification codes (OTP) and authentication security codes. Nothing else is sent by SMS.
- Frequency: Messages are sent only when you initiate a sign-in or account action. We do not send marketing or promotional text messages.
- Costs: Standard message and data rates may apply depending on your carrier plan
- Opt-out: Reply STOP to any message to opt out. For help, email support@formvidya.com
- Carriers: Delivery depends on your mobile carrier. Carriers may delay, filter or fail to deliver messages, and are not liable when they do.
We never share your phone number for marketing. The only third party it is sent to is our SMS provider (Twilio), solely to deliver a message you asked for; like the rest of your account record it is also stored with the cloud hosting provider described in section 4.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers — With trusted third-party vendors who help us operate the Services (e.g., cloud hosting, SMS delivery, email delivery, analytics). These providers are contractually obligated to protect your information.
- AI processing providers — Documents or images you submit for credential extraction, messages you send to our AI coach, and, if you turn on the Milo workout summary for a workout, that workout’s results, such as the exercises, repetition counts, form scores, form issues and duration, may be processed by third-party AI model providers (including OpenRouter and Anthropic) to generate responses or extract the fields you requested. Your content is not used to train these providers' models, and where a provider supports it we enable no-retention processing options; providers may otherwise retain data for a limited period under their own policies. Documents and images you upload (such as credential documents) are retained by FormVidya for as long as your account remains open; after your account is closed, they are deleted or anonymized in accordance with Section 6 (Data Retention).
- Crash diagnostics provider — If you turn on crash reporting, the reports described in Section 1 are processed by Functional Software, Inc. d/b/a Sentry, acting as our service provider under a data processing agreement. Reports are stored in Sentry’s United States data region and retained for 30 days, after which they are deleted automatically. Sentry does not use this data for its own purposes.
- A professional you choose — If you share a session with a trainer or other professional through FormVidya (Section 1a), what you shared becomes visible to that person. This happens only for a session you chose to share, only with the professional you named, and only after you confirm it. We do not make your sessions, recordings or diagnostic data available to professionals otherwise.
- Legal requirements — When required by law, regulation, legal process, or governmental request
- Safety — To protect the rights, property, or safety of FormVidya, our users, or the public
- Business transfers — In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
5. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Secure authentication using ECDSA device keys and biometric verification
- Access controls and audit logging
- Regular security assessments
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes, a copy of a session’s diagnostic record we have kept to investigate a problem or improve our analysis, records of access to your data that we keep for security, and routine service logs, which expire on their own.
We do not store the camera images from your workouts (Section 1a).
Recordings you make on your phone stay on your phone. The app deletes each one 30 days after it is saved, the next time you open the app. A copy you save to your photo library is yours.
A session you shared with a professional stays available to that professional until it is removed. Contact us at privacy@formvidya.com to stop sharing a session and we will remove it.
The diagnostic record created automatically for every session (Section 1a) is kept for 14 days from the start of that session, and deletion of the stored copy normally completes within 15 days. We may keep a copy of a particular session longer to investigate a problem or improve our analysis.
Crash and diagnostic reports (Section 1) are retained by our crash diagnostics provider for 30 days and then deleted automatically. Because these reports are identified only by a random device-generated identifier that is deliberately not linked to your account, we cannot locate an individual user’s crash reports — which means they cannot be retrieved or deleted on request, and are not deleted as part of account deletion. They expire on their own within 30 days. Turning off “Send crash reports” in Settings stops any further reports immediately.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Deletion — Request deletion of your personal information
- Portability — Request your data in a portable format
- Opt-out — Opt out of certain data processing activities
To exercise any of these rights, contact us at privacy@formvidya.com.
Recording a workout, sharing a session with a professional and the Milo workout summary are optional, and none of them happens unless you choose it. The diagnostic record is created for every session and cannot be turned off. To withdraw a permission you have given, or to stop a session being shared, contact us at privacy@formvidya.com. Deleting your account removes the recordings the app holds on the phone you delete it from.
One limit worth stating plainly: the access, correction, deletion and portability rights above cannot reach optional crash and diagnostic reports, because those reports are not linked to your account and we have no way to identify which are yours. The control you do have over them is direct — the “Send crash reports” switch in Settings — and every such report is deleted automatically within 30 days.
8. Children's Privacy
The Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us at privacy@formvidya.com and we will promptly delete it.
9. Third-Party Links and Services
The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party services you use.
10. International Data Transfers
The Services are hosted in the United States, and the service providers described in Section 4 — including our crash diagnostics provider, whose United States data region is used for optional crash reports — process data there. If you use the Services from outside the United States, your information is transferred to and processed in the United States, where data-protection law may differ from that of your own country. Where personal data is transferred out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, incorporated into our agreements with those providers, as the transfer mechanism.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice (such as an in-app notification or email). Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
- Privacy inquiries: privacy@formvidya.com
- General support: support@formvidya.com
- Phone: 415.662.0634
- Website: formvidya.com
FormVidya · San Francisco, California, United States