Form Coach privacy policy

The short version

• Your camera video, pose data, reps, scores, workout history, reports and settings stay on your device. We never receive them.
• There are no accounts, no sign-in, no ads and no advertising identifier.
• Adults and teens: pseudonymous usage statistics (Firebase Analytics), linked to a random app-instance ID with no name, account or advertising ID, help us improve the app. In the EU, UK and Switzerland they are off unless an adult agrees, and teens there send none.
• Children under 13 can use Form Coach only after a parent or guardian sets it up. In a child's setup, no usage statistics are sent at all.
• If you choose to share a routine, the routine itself (not you, not your workouts) is stored on our server so others can open the link.

1. What stays on your device

Form Coach analyses your movement with your device's camera, entirely on the device. Video, pose data, rep counts, form scores, workout history, Form Reports, plans, routines you build and every setting are stored only on your device (and in your own iCloud or device backups, under Apple's protections). We do not run a server that receives any of it. You can delete it at any time in Settings, or by deleting the app.

2. Pseudonymous usage statistics (adults and teens only)

For users 13 and older, Form Coach uses Firebase Analytics (Google) to collect pseudonymous usage statistics, linked to a random app-instance ID (no name, account or advertising ID) and reported to us only in aggregate: which screens and features are used, whether a set counted reps, coarse buckets such as "20–49 reps", and the app's version, language and device type. There is no advertising identifier, no user ID, and no free text you typed (such as routine names, notes or your name) is ever sent. Ad storage and ad personalization are switched off. Analytics data is kept for 14 months.

Before the app knows your age group on a new installation, events are held on the device and only sent once you answer; if the answer is a child's age group they are deleted unsent. Analytics stays switched off until you answer the age question; nothing is sent before then. In a child's setup, analytics is switched off and the library's local data and app-instance identifier are deleted.

3. Shared routines (only if you share or add one)

When you share a routine, the app sends our server (allthingsn.com) the routine's name, your optional note and level, the exercises and their targets, and your display name only if you turn on "Show my name". It also sends a random key generated on your device (we store only a one-way hash of it) so that only your device can turn the link off. We store the routine snapshot, a hash of the link's code, the number of times the routine was added, and a hash of the IP address the request came from (used only to prevent abuse and rate-limit requests). Never sent: your workouts, videos, scores, history, health data, contacts or identity.

Anyone with the link can see that routine on our website and in the app, and add a copy. Shared routine pages are excluded from search engines. Do not put personal information in a routine; the app and our server reject routine text that contains links, email addresses, phone numbers or social-media handles.

When you add a shared routine, the app sends the link's code and a random retry key so the same routine is not added twice. The copy is stored only on your device. The person who shared it cannot see that you added it, who you are, or anything about your workouts; they see only a total count of how many times their routine was added.

Reports. Anyone can report a shared routine from inside the app. A report stores the reason, a random reporter key and a hash of the IP address. Routines reported by several different people are taken down automatically and reviewed.

Retention and deletion. Turning a link off stops anyone new from opening it; the snapshot is deleted from our server within 30 days of being turned off, Records used only against abuse follow a fixed schedule: import records (link code and retry key) are deleted after 90 days, the hashed IP address stored with a shared link is cleared after 90 days, and reports (reason, reporter key, hashed IP address) are deleted after 180 days. IP addresses are stored only as a keyed one-way hash. To have a shared routine deleted immediately, email us the link. Copies that people already added stay on their devices; we cannot reach them.

Our web server, like any web server, records request logs (including IP address and the page requested) for security and troubleshooting; they are kept only for a limited period and are not used to identify people or for analytics.

4. Children and teens

On a new installation, Form Coach asks for a birth month and year. Only the resulting age group (adult, 13–17, or under 13) is kept, on the device; the birth date is not stored and is never sent anywhere.

Under 13. A child can use Form Coach only after a parent or legal guardian completes a parental check and accepts the safety notice and Terms for themself and the child. In a child's setup Form Coach collects no personal information from the child for us: no analytics, no attribution lookups, no Game Center friends or leaderboards (Crew is off), no sharing to social apps, and the child cannot publish routines. The child can add a routine that a teacher, coach or parent shared; that request sends only the link's code and a random retry key. A child can also report a routine; that sends the report reason (chosen from a fixed list) and a random reporter key stored on the device. In both cases our server processes the IP address only to deliver the routine and prevent abuse (stored only as a keyed one-way hash, on the schedule in section 3), which is the internal-operations use the U.S. Children's Online Privacy Protection Act permits. Camera analysis stays on the device as for everyone.

Parents' rights. A parent or guardian can review or change the setup at any time under Settings › Age & family (protected by the parental check), delete everything on the device from Settings or by deleting the app, and contact us at the address below with any question about a child's use. Because a child's setup sends us nothing that identifies the child, we hold no record about the child to review or delete; if you believe we do, write to us and we will delete it.

13 to 17. Teens confirm that a parent or guardian has read and agreed to the safety notice. Pseudonymous usage statistics (section 2) apply.

5. Apple services you choose to use

Apple Health: with your permission, Form Coach saves workouts to Apple Health and reads heart rate during sessions; health data stays in Apple Health and is never sent to us or used for analytics or advertising. Game Center (Crew, adults and teens): Crew uses your Game Center friends and leaderboards, operated by Apple under Apple's privacy policy; we receive no Game Center data. Apple Search Ads attribution (adults and teens): the app may ask Apple whether it was installed from a Search Ads campaign; the answer is a campaign-level label with no personal information. Apple Intelligence (Ask the Coach): runs on your device.

6. No ads, no sale of data

Form Coach shows no ads and has no in-app purchases. We do not sell or share personal information for advertising, and we do not track you across other companies' apps or websites.

7. Terms of use

Your use of Form Coach is governed by our Terms of Use (including Section 3A for Form Coach) and, as an App Store app, by Apple's Standard License Agreement (EULA), and on Android by the Google Play Terms of Service.

8. If you are in the EU, UK or Switzerland

All Things AI, Inc (Los Gatos, California, USA) is the controller of the data described here. Usage statistics are off unless you agree: adults are asked once, after the safety notice, and can change their answer at any time under Settings › Sharing & family (consent is the legal basis; saying no changes nothing else in the app). Teens in these countries are not asked and send no usage statistics. Shared routines are processed to provide the sharing you asked for (performance of a contract) and to prevent abuse (legitimate interests). You can ask us for access to, correction or deletion of personal data we hold about you, object to or restrict its use, and withdraw any consent you gave, by writing to the address below; because most Form Coach data never leaves your device, deleting the app removes it. Firebase Analytics data is processed by Google, including in the United States, under Google's data processing terms and standard contractual clauses. You also have the right to complain to the data protection authority where you live.

Contact

Privacy questions, a parent's request, or deletion of a shared routine: support@allthingsn.com, subject line "Form Coach privacy". You can also use the support page.

Company

All Things AI, Inc — Los Gatos, CA, USA. See our company-wide privacy policy for shared practices across our products.