Privacy & your data

Current app version · Updated October 18, 2026

Forma keeps the training information you enter so you can review your routine and continue your progress.

What the app stores

When you create an account, Forma stores your name, email address, and account identifier. Account progress can include your goals, routine targets, saved sets, completed sessions, workout drafts, preferences, and coach conversation. The app saves this progress to its server and keeps a browser copy for recovery and syncing.

Signing in

Google sign-in uses your basic Google profile and email to identify your account. Forma does not receive your Google password and does not request Gmail, Drive, or Calendar access. If you choose an email/password account, Forma stores a salted password hash rather than your plaintext password.

Essential session cookies keep you signed in for up to 30 days. Production session cookies use HttpOnly and Secure protections. Signing out ends that session; it does not delete progress stored in your account.

Device mode and local copies

Forma requires an account to use the training website. Legacy progress previously saved in device mode may remain in your browser. It stays separate from account progress until you choose to import it into an empty account after signing in. Unsynced edits and backups kept after a sync conflict may remain on that browser. Clearing the browser's site data removes those local copies.

Services used

The hosted app uses Railway for its application server and persistent account storage, and Google for Google sign-in. These services process the information needed to provide hosting and authentication under their own privacy policies: Railway and Google.

The signed-in goals coach uses Claude from Anthropic. Messages you send to that coach, the recent conversation, and the training profile built from it are sent to Anthropic to generate replies. Your email address, password, and full workout logs are not included in those requests. Avoid including private information you do not want processed by the provider. See Anthropic’s privacy policy. Legacy demo conversations may remain in local browser copies. No advertising or analytics trackers are included in this version.

Subscriptions and payment data

Forma Plus costs $9.99 USD per month and renews until canceled. Stripe hosts checkout and subscription management. Forma stores a Stripe customer identifier, subscription status and period end, and AI message usage to enforce plan access. Payment card details are handled by Stripe and are not stored by Forma. See Stripe’s privacy policy. Free accounts include setup and 5 additional AI replies total; this allowance does not reset.

Export and retention

You can export a JSON copy of your progress from Progress or your account screen. Export your goals conversation separately using Export conversation in the coach. Account data remains on the app server until it is removed by the operator; signing out does not remove it. Account deletion is not self-service in this version. For account questions, use the support email shown on Forma's Google consent screen.

Access to your progress

Account progress is accessed through authenticated sessions. Avoid sharing your account or leaving it signed in on a shared device. An exported backup contains your training information, so keep it somewhere you trust.