Zoldan Labs Limited ("Zoldan Labs", "we", "us"), a company registered in New Zealand (NZBN: 9429053670946), operates Forma. This policy explains what we collect, why, and the choices you have. We process personal information under the New Zealand Privacy Act 2020, and where the GDPR applies to you, under that framework too.
| Data | When | Why |
|---|---|---|
| Email address | You create an account | Sign-in (magic link / one-time code) and, if you subscribe, billing |
| Training profile | Onboarding | Goals, sex, age, height, weight, activity level, injuries, health conditions, diet and food preferences — used only to build and adapt your plan |
| Training & nutrition logs | Using the app | Sets, reps, weights logged, bodyweight entries, meals starred, supplement checks |
| Device & usage | Signed in | App version, platform (Android/iOS/web), last-seen time — lets us support you and see if an update reached your device |
| Crash reports | If the app errors | Error message, stack trace, page URL — to fix bugs. No personal fields are attached beyond your account id |
| Coach conversations | You message the AI coach | Sent to our AI provider to generate a response (see "Third parties" below); kept on your device to show your chat history — we do not store the text of your conversations on our servers |
| Coach usage record | Each coach reply | Timestamp, model name, and token counts only (never the message content) — lets us enforce fair-use limits and see what the coach costs us. See "Subscriptions and payment" in the Terms for the limits themselves |
| Payment details | You subscribe | Handled entirely by Stripe — we never see or store your card number |
Progress photos are never uploaded. They're stored in your browser's local database (IndexedDB) on your own device and are not part of the data we sync to our servers, even if you're signed in. Uninstalling the app or clearing site data deletes them permanently, on that device, with no copy anywhere else.
We don't collect location, contacts, or anything from your device beyond what's listed above. We don't use advertising trackers, and we don't sell or rent your information to anyone.
We use Plausible, a cookieless analytics tool that doesn't collect personal data or track you across sites. It tells us in aggregate how many people visit and which pages they use — never your name, email, health information, or anything you've logged in the app.
Each of these processes data under its own agreement with us and is not permitted to use it for its own purposes.
We keep your account data for as long as your account is active. If you delete your account, we delete your profile and synced training data within 30 days, except where we're required to keep billing records for tax purposes (typically 7 years under NZ law) or crash reports needed to investigate an issue you reported.
You can access, correct, export, or delete your data at any time from Settings → Account in the app, or by emailing hello@zoldanlabs.com. If you're in the EEA/UK, you also have the rights set out under the GDPR, including the right to lodge a complaint with your local supervisory authority.
Deleting your account: see how to delete your account — it can be done in the app, or by email if you've already uninstalled it, and lists exactly what is removed and the two narrow things we're required to keep.
Forma is not directed at children under 16 and we don't knowingly collect their data.
If we make a material change, we'll update the date above and, for signed-in users, show a notice in the app.
Zoldan Labs Limited, New Zealand · hello@zoldanlabs.com