Privacy Policy
Last updated: October 18, 2026
What Data We Collect
We collect the following types of data to provide and improve our services:
Account Information: Email address and display name when you create an account. We support sign-in via Sign in with Apple, Sign in with Google (Android) or email + password.
Training Data: Exercise repetitions, form scores, joint angles, and session timestamps. This data is generated locally on your device during analysis and only sent to our servers if you sign in and sync.
Usage Analytics: Aggregated, privacy-respecting analytics on which features are used (Plausible, self-hosted on our own server — cookieless, no personal identifiers).
Diagnostic Data: Crash reports and error events (via Sentry) to help us fix bugs. These do not include the contents of your videos or pose data.
Health & Fitness Information: The starter interview and the coach's intake interview can record injuries, medical conditions, medication and other health details. This is special-category data under GDPR Article 9. We process it only with your explicit consent. For the starter interview you give it by choosing to fill it in. A coach may record health information with you only after you allow it for that coach in the app (Profile › Shared with your coach › Health information); allowing it for one coach never allows it for another. Each consent is kept with the version of the text you saw, the coach it was given for, and when it was given or withdrawn. When no coach is left with your permission, the health information coaches recorded is erased. It is used only so that training can be planned safely, and you can have it erased at any time, separately from the rest of your account.
Body log and progress photos: Measurements you log (weight, waist, body fat, resting heart rate and the like) and progress photos you take are stored on your device. When you are signed in, they are also backed up to your account in our EU storage, so they survive a new phone. A coach sees them only if you share them with that coach in the app (Profile › Shared with your coach), measurements and photos separately. A new coach sees none of them until you turn sharing on for them, and turning it off hides them from that coach at once. You can delete any entry in the app, or all of them with your account.
Apple Health / Health Connect (only if you turn it on): we read weight, body fat, lean mass and height into your body log. For a coached client who shares health activity with a coach, we also read workouts with their duration, distance, energy, average and maximum heart rate and time in heart-rate zones, and show them to that coach only. Raw heart-rate samples never leave your phone. Nothing is written back. When no coach is left with health activity shared, the imported workouts are deleted at once. Health data is never used for advertising, never sold, and shared only with the coaches you choose.
Messages: Messages you exchange with a connected coach are stored so both of you can read them. They are deleted with either account.
Notification Tokens: If you allow notifications, a device token identifies your phone or Mac to Apple's push service (iPhone, Mac) or to Google's Firebase Cloud Messaging (Android). It is removed when you sign out or delete your account.
Offline Clients: A coach may record people who do not use the app — a name, an email address and training notes. For those records the coach is the data controller and CaliForma the processor. If a coach has recorded you, ask them or write to info@califorma.app and the record is erased.
Important: Videos are NEVER uploaded to our servers unless you explicitly choose to share them with a coach or send a clip for feedback. Progress photos and measurements are the one exception described above: they are backed up to your own account when you are signed in, and shown to a coach only when you turn sharing on for that coach.
Legal Basis (GDPR)
Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
• Contract (Article 6(1)(b)) — to provide the app, your account, and any coach features you opted into.
• Consent (Article 6(1)(a)) — for transactional emails, opt-in anonymized training-data contributions to improve our models, and any feature you specifically enable.
• Explicit consent (Article 9(2)(a)) — for health information you or your coach record in an interview, and for the measurements, progress photos and health activity you choose to share with a coach, each given per coach and withdrawable at any time.
• Legitimate Interest (Article 6(1)(f)) — for crash reports, abuse prevention, and aggregate usage analytics. You can object at any time by writing to info@califorma.app.
We do not engage in profiling for advertising and we do not use automated decision-making with legal effect on you.
How We Use Data
Your data is used for the following purposes:
• App Improvement: Anonymized training data helps us refine pose-detection tuning and form-scoring rules.
• Coaching Features: When connected to a coach, your training data and shared videos enable personalized feedback.
• Analytics: Aggregated, anonymized usage data helps us understand how the app is used and prioritize features.
We never use your data for advertising or sell it to third parties.
Data Consent
You have full control over your data sharing:
• Opt-in: Sharing anonymized training data to improve our models is entirely opt-in. You choose whether to participate.
• Opt-out: You can opt out of anonymized data sharing at any time in your app settings.
• Coach Sharing: Connecting to a coach shares your training: sessions and results, check-ins and the videos you choose to send. Measurements, progress photos, health activity and health information are shared separately, per coach and per kind, only when you turn each on for that coach in Profile › Shared with your coach. A new coach starts with nothing of these shared, and ending a coaching relationship stops all sharing with that coach.
• Your coach's role: When you connect to a coach, your coach decides how your coaching data is used and is its controller; CaliForma processes it on the coach's behalf under our coach terms.
Your preferences are respected immediately upon change.
Third Parties
We use a small number of third-party processors to operate the service. We never sell your personal data to any third party.
• Apple — Sign in with Apple, and push notifications on iPhone and Mac. Apple does not share your data with us beyond what you authorize.
• Google — Sign in with Google and push notifications (Firebase Cloud Messaging) on Android. Google receives the device token it issues; we receive only the name and email you authorize.
• Cloudflare R2 (EU jurisdiction) — encrypted object storage for videos you explicitly share with a coach, your progress photos and profile picture, coaches' own exercise clips and logos, and exercise demos.
• DigitalOcean (Frankfurt, Germany, FRA1) — server hosting for our backend API and PostgreSQL database.
• Twilio SendGrid (United States) — sends transactional email (verification, password reset, welcome) on our behalf. Receives the recipient email address; nothing else.
• Plausible (self-hosted) — aggregate page-view and event analytics for our marketing website only, running on our own EU server; no third party receives the data. No personal identifiers; no cookies.
• Sentry (EU region, Germany) — collects crash reports and error events from the apps and backend so we can fix bugs. Sentry is configured to scrub IP addresses and personal-data fields.
Where a processor is outside the EU/EEA (Twilio SendGrid, Google, Apple), transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We have data processing agreements with every processor listed.
No advertising trackers, pixels, or cross-app tracking SDKs are present in our apps.
Data Storage & Retention
Your data is stored securely in the EU:
• Database: PostgreSQL with industry-standard security practices, hosted on DigitalOcean in Frankfurt, Germany (FRA1).
• Encryption: All data is encrypted in transit using HTTPS/TLS. Object storage (Cloudflare R2) encrypts data at rest.
• Local Processing: Video analysis happens entirely on your device — no video data is transmitted unless you explicitly share it. Progress photos are plain photos you take; no analysis of them leaves your phone.
• Retention:
- Training session metadata, body measurements and progress photos are kept while your account is active.
- Shared videos are kept for 30–365 days depending on the connected coach's plan tier (Free 30 days, Pro 90, Studio 365).
- When you delete your account, your sessions, videos, messages, plans, habits, interviews and notification tokens are deleted at once and your profile is anonymised. Feedback a coach wrote about a session stays attributed to "Deleted user"; the record of what you consented to is kept as proof of lawful processing. Encrypted database backups expire within 30 days.
- Crash reports are auto-purged after 90 days.
Your Rights
Under GDPR you have the following rights regarding your personal data:
• Access — request a copy of all data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure (Right to be forgotten) — delete your account from the app's settings, or ask us to; see https://califorma.app/delete-account for the steps, and Data Storage & Retention for exactly what that removes.
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format and transmit it elsewhere. Account → Data & privacy → Export my data downloads a JSON file of your records, including what you shared with each coach and when; photos and videos can be saved from the app.
• Object — object to processing based on legitimate interest.
• Withdraw Consent — at any time, where processing is based on consent.
To exercise any of these rights, contact us at info@califorma.app. We respond within 30 days.
You also have the right to lodge a complaint with your national data-protection authority (in Finland: Office of the Data Protection Ombudsman, tietosuoja.fi).
Children's Privacy
CaliForma is not intended for use by children under 13 (or under 16 in jurisdictions where parental consent is required for data processing).
We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact info@califorma.app and we will delete the account and any associated data promptly.
Changes to This Policy
We may update this policy as the product evolves or to reflect legal changes. When we make material changes we will:
• Update the "Last updated" date at the top of this page.
• Notify signed-in users by email or in-app notice when the change is significant.
• Allow you to review the new terms before they take effect for you.
Continued use of the service after a policy update means you accept the revised policy.
Contact
If you have any questions about this privacy policy or your data, please contact us:
Email: info@califorma.app
Data Controller: 60/40 Company (Business ID 3221849-3), [postal address], Finland — info@califorma.app
We aim to respond to all privacy-related inquiries within 48 hours, and to formal GDPR requests within 30 days as required by law.