Privacy
Last updated: October 2026
FORMA is the app a personal trainer uses to coach their clients: programs, workouts, check-ins and messages. This page explains what we store, why, who processes it and what the AI does with it. FORMA is in a trial (beta).
Who processes your data
For clients' data, the controller is your coach. FORMA ([nome e cognome o ragione sociale di chi gestisce FORMA]) processes that data on the coach's behalf, as a processor, only to run the service.
For coach accounts, the controller is FORMA ([nome e cognome o ragione sociale di chi gestisce FORMA]). Contact: formacoach@gmail.com.
What data
Account: name, email and password (stored hashed; no one can read it).
Training: the program your coach prepares, the workouts you log (exercises, sets, loads, reps), scheduled sessions.
Check-ins and messages: what you write to your coach, and the weight and effort you report.
Health data: pain or an injury you report, limitations your coach notes, body weight. These are special-category data (GDPR art. 9), processed only with your explicit consent, given when you join and revocable at any time.
Why
So your coach can coach you: your program, your logged workouts, messages and sessions.
To tell your coach where to look: reported pain, a missed session, a load that hasn't moved in weeks.
We don't sell data, use it for advertising, or share it with anyone beyond the providers below.
The studio's ranking
If your coach turns it on, we ask whether you want to appear in the monthly ranking. Only if you say yes do the other clients of the same studio see your first name and last initial and two numbers for the month: how much you trained against your own target, and how many personal records you set. Never loads, body weight, check-ins, pain or messages.
You can leave at any time from your profile: from then on, the others no longer see your numbers.
The AI
Some features use an AI model (Claude, by Anthropic): reading a message or check-in to spot pain or a request to move a session, writing the coach's daily summary, suggesting a reply or a program change.
The AI suggests, the coach decides: no program change or message goes out unless the coach approves it. Text written by the AI is labelled.
For these features the text needed (for example the message and the exercise name) is sent to Anthropic. Under its commercial terms, data sent through the API is not used to train models.
Providers
Supabase: database and logins. Data is stored on a server in the European Union (Ireland).
Vercel: hosts the website and the app.
Anthropic: the AI model described above. Processing may take place in the United States, covered by the GDPR's standard contractual clauses.
How long
Data is kept while your account is active. If your coach closes your profile or you ask us to, we delete it within 30 days. Write to formacoach@gmail.com.
Your rights
You can ask to see, correct, delete or receive a copy of your data, restrict or object to its use, and withdraw consent for health data at any time. Write to your coach or to formacoach@gmail.com.
You can also complain to the Italian data protection authority (garanteprivacy.it).