Privacy Policy

Last updated: 3 October 2026

This policy explains what Formyx collects, why, where it goes, and what you can do about it. It is written to be read, not to be skimmed past.

1. Who is responsible

Formyx is operated by Ufuk Gökoğlan, an individual developer based in Türkiye. There is no company behind it — one person builds and runs this app.

For anything in this policy, including requests about your data, write to help@getformyx.com.

Under the GDPR, this makes Ufuk Gökoğlan the "data controller" for your information. Under Turkish law (KVKK), the equivalent term is "veri sorumlusu".

2. What Formyx collects

Formyx is a nutrition and training app, so most of what it holds is information you deliberately enter about your body and your habits. Nothing here is collected for advertising — there are no ad networks and no tracking across other apps or sites. The app does use a crash reporter and a product analytics service; both are described honestly in section 2.3, and neither ever receives the content of what you log.

2.1 Account information

• Email address and password. Passwords are never stored in readable form; only a cryptographic hash is kept.
• If you sign in with Google: your email address, your name, and the URL of your Google profile picture, as provided by Google.
• If you sign in with Apple (iPhone only): a stable identifier Apple assigns to you for Formyx, and the email address you chose to share — either your real address or a private relay address from Apple (ending in @privaterelay.appleid.com or @private.icloud.com) that forwards to you. Formyx does not ask Apple for your name.
• Technical sign-in records. Our authentication provider records the IP address and browser/device identifier used when you sign in, as a standard security measure. We do not use these for anything else.

2.2 Information about your body and health

This is the sensitive part, and it deserves to be named plainly. Formyx collects and stores:

• Physical characteristics: age, sex, height, current weight, and your weight history over time
• Goals: target weight, chosen pace, activity level, and the calorie and macronutrient targets calculated from them
• Injuries and limitations you declare so that unsafe exercises can be filtered out of your program
• Dietary preference, if you set one
• Meals you log: name, calories, protein, carbohydrates, fat, and the date and time
• Water intake per day
• Workouts you complete: which routine, duration, sets completed, and an estimated calorie figure
• Your training program, which is generated from the answers above

Under the GDPR this counts as special category data — data concerning health. We process it only because you have explicitly asked us to: without it, the app cannot calculate a single number it exists to calculate. You can withdraw that consent at any time by deleting your account (section 7).

2.3 Usage information

Formyx records, per day, how many times you opened the app, how many logging actions you took, and whether you weighed in. This is used to power features you can see — the weekly consistency indicator, the reminder that arrives if you go quiet for a couple of days — and to understand, in aggregate, whether the app is helping people stay consistent. It is never sold and never shared for advertising.

Formyx also counts, per day, how many AI analyses you requested, so that one account cannot use up the capacity everyone shares. This counter holds a number and a date, nothing about what you analysed.

Product analytics (PostHog). To understand which parts of the app are used, Formyx sends a small set of usage events to PostHog, hosted in the European Union. These events describe actions, never content: which onboarding step was shown, that a meal was logged and by which method (photo, barcode, manual or text estimate), that a workout was completed and roughly how long it took, and that the subscription screen was viewed. They never include what you ate, your calories or macros, your weight, your photos, or anything you typed. After you sign in, events are tied to your internal account identifier — an opaque ID, not your email or name, which are never sent. You can turn analytics off at any time in Settings → Data; when it is off, nothing is sent from your phone. One event is recorded by our server rather than by the app — the moment a free trial converts into a paid subscription, which happens while the app is closed. That server-side event carries the same opaque account identifier and the plan name, never a price or a payment method, and it respects the same switch: your preference is copied to your account when you change it, and the server checks it before sending. There can be a short delay between flipping the switch and the copy reaching your account, for example if you are offline at the time.

Crash reports (Sentry). When the app crashes, a technical report — the error, the app version, and the device model and operating system — is sent to Sentry, hosted in the European Union, so the bug can be found and fixed. Crash reports carry your internal account identifier and no other personal information: no meal names, no health values, no photos, no email. A report also includes a short trail of the app's recent technical steps, such as screens opened and network requests made; before it leaves your phone, request addresses are cut down to the bare endpoint and food-database lookups are removed entirely, so the trail never shows what you searched for or scanned. Sentry is set not to store your IP address. They are separate from analytics and are not covered by the analytics switch, because an app whose crashes are invisible cannot be fixed.

2.4 Meal photos and AI estimates

When you photograph a meal, or type a short description of one and ask for an AI estimate, the photo or the text is sent to Formyx's server, which forwards it to Google's Gemini API to estimate the calories and nutrients. Neither is stored on Formyx's servers — it passes through in memory and is discarded once the estimate returns. A copy of the photo is kept on your device; the database stores a reference to that file, not the image itself. If you delete the app or your phone clears its cache, those photos are gone.

This routing exists so that the API key is not embedded in the app, where it could be extracted and abused.

What Google receives, and what it may do with it. Google receives the photo or your description together with Formyx's instructions — no name, email or account identifier is attached. Formyx uses the paid tier of the Gemini API. Under Google's terms for paid use, Google does not use what you send, or the answers it returns, to improve its products, and it processes them as a data processor for Formyx under its data processing terms. Google does keep a log of requests and answers for a limited period, solely to detect and prevent violations of its Prohibited Use Policy and to make any disclosures required by law or regulation, and that data may be stored transiently or cached in any country where Google or its agents maintain facilities. If you would rather not send anything to Google at all, scan a barcode or enter the values yourself — neither sends anything to Gemini.

Nothing is sent without your permission. Before your first AI estimate, the app asks whether you allow it and names Google's Gemini API. If you say no, nothing is sent and barcode scanning and manual entry work as usual; the app asks again the next time you choose an AI estimate. You can withdraw or give your permission at any time in Settings → Data.

2.5 Training program variety

When Formyx creates your weekly training program, its server also asks Google's Gemini API to help vary the exercises. What it sends is, for each training slot, the day number, the slot number, the muscle group, the exercise currently planned and a short list of candidate exercises — each given only by its name, its catalogue identifier and its movement type — and Gemini picks one exercise per slot from that list. The candidates are chosen after exercises unsuitable for your declared injuries and equipment have been removed, so the list reflects your training setup indirectly, but it contains no account identifier, no health values or injury details, and nothing you typed. The request is sent by Formyx's server, not your phone, so it cannot be linked to you, and the paid-tier terms described in section 2.4 apply to it. Sets, repetitions and rest times are always decided by Formyx's own rules, never by the AI.

3. What Formyx does not do

• No advertising. There are no ad networks in this app and no advertising identifiers are collected.
• No selling your data. Not to anyone, in any form, including anonymised or aggregated.
• No tracking across other apps or websites.
• No content in analytics or crash reports. Formyx does use an analytics service and a crash reporter (section 2.3), but neither ever receives what you ate, weighed, wrote or photographed — events describe which features were used, never their content. Analytics can be switched off in Settings → Data.
• No push notification servers. All reminders are scheduled locally by your phone's operating system. Nothing about your reminders leaves your device.

4. Who your data is shared with

Formyx relies on a small number of service providers to function. Each receives only what it needs.

Formyx keeps a copy of your subscription status (the product, its dates and whether it is a trial) on its own servers so that AI features can check it without contacting RevenueCat on every request, and so that it can email you once, a few days before a free trial ends, with how to cancel if you don't want to be charged. A note that this email went out is kept so it is never sent twice. Both are deleted with your account.

Formyx may also disclose information where legally required to do so, for example in response to a valid legal order.

5. What is stored on your phone

Some things never leave your device:

• Your sign-in session token
• Your language and unit preferences
• Your notification preferences and reminder times
• A draft of your onboarding answers, if you leave partway through, so you can pick up where you stopped
• An in-progress workout, so a phone call does not lose your sets
• A record of which one-time explanations you have dismissed, and whether you have allowed AI estimates
• Photos of meals you have logged
• A saved copy of your most recent data, so the app still works without a connection. This includes health information: your profile, your recent meals, your weight history, your weekly training program and your daily targets. It is a copy for reading only — nothing you enter while offline is stored and sent later.
• Workouts you finished with no connection. A completed workout cannot be re-done, so instead of losing it we keep it on your phone — its name, how long it lasted, how many exercises and sets you did, and the estimated calories — and add it to your history the next time you are online. This is the only thing the app saves in order to send it later; meals, weight and water simply cannot be entered while you are offline. If a workout still cannot be saved after several tries, it stays on your phone and is listed under Settings → Data, so it is never lost quietly.

Deleting the app removes all of this. The saved copy is erased when you sign out, when you use Reset Data, and when you delete your account. Workouts still waiting to be sent are kept through Reset Data — Reset Data does not remove your workout history either — and are erased when you delete your account.

6. How long data is kept

Your account data is kept for as long as your account exists. When you delete your account, it is removed immediately — see section 7.

The saved copy on your phone keeps only what is recent: your current profile and targets, your weight history, and roughly the last week of days you have looked at. Older days are dropped automatically as new ones are saved.

A workout waiting to be sent is kept until it reaches your account, or for 30 days. One that the server has refused is kept until you retry it or discard it yourself; it is never removed automatically.

Technical sign-in logs held by our authentication provider (including IP addresses) follow that provider's own retention schedule and are not under direct control of the app.

7. Deleting your account

You can delete your account from inside the app: Profile → Settings → Delete my account. You will be asked to confirm, because this cannot be undone — by typing your email address, or, if you signed in with Apple on iPhone, with Apple. Confirming with Apple also removes Formyx from your Apple Account's list of apps that use Sign in with Apple; if that step cannot be completed, the app shows you how to remove it yourself. If a subscription is still renewing, the app tells you before you confirm, because deleting your account does not cancel it.

When you do, the following are permanently deleted: your profile, every meal you logged, your entire weight history, your workout history, your training programs, your calorie and macro targets, your water log, and your usage records. This deletion is immediate and is enforced by the database itself.

One honest exception. Our authentication provider keeps a separate security audit log — a record of sign-in events, including the email address used and the IP address it came from. That log is not linked to your account row and is therefore not reached by the deletion. It is retained according to the provider's own schedule. Everything else is gone.

You may also clear your app data without deleting your account, from Profile → Settings → Reset data.

A step-by-step version of this section — including how to request deletion by email if you can no longer open the app — is published at getformyx.com/account-deletion alongside this policy.

8. Your rights

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable form. If you are in Türkiye, KVKK Article 11 gives you comparable rights.

In practice:

• Access and correction: most of your data is visible and editable inside the app — Profile, Goals, Progress and the meal log.
• Deletion: section 7.
• Portability: the app does not yet have an export button. Write to help@getformyx.com and your data will be sent to you in a machine-readable format.
• Withdrawing consent: delete your account, or turn off notifications in Settings for that specific processing.

You also have the right to complain to a data protection authority — in the EU, the authority in your country of residence; in Türkiye, the Kişisel Verileri Koruma Kurumu.

Requests are handled by one person, so please allow a reasonable time, and in any case no longer than one month.

9. Children

Formyx is not for anyone under 18. The app calculates calorie deficits and weight-loss targets, and those are not appropriate for children or adolescents without medical supervision.

We do not knowingly collect information from anyone under 18. If you believe a child has created an account, write to help@getformyx.com and it will be deleted.

10. Security

Data is transmitted over encrypted connections and stored with access rules that make each user's rows readable only by that user. Passwords are hashed, never stored in readable form.

The copy saved on your phone for offline use lives in the app's private storage, which the operating system keeps separate from other apps. Formyx does not add its own encryption on top of that. On a device protected by a passcode or biometrics, the system's own storage encryption applies; on a device without one, or one that has been modified to bypass those protections, it does not.

No system is perfectly secure, and it would be dishonest to claim otherwise. If a breach affecting your data occurs, you will be informed in line with applicable law.

11. International transfers

The providers listed in section 4 operate internationally, which means your data may be processed outside your country of residence, including in the United States. Supabase, Sentry and PostHog are deliberately configured to store their data in the European Union. Where required, these transfers rely on the standard safeguards those providers have in place, such as the European Commission's standard contractual clauses.

12. Changes to this policy

This policy will change as the app changes. When it does materially, the date at the top is updated and, where the change is significant, you will be told inside the app. Continuing to use Formyx after a change means you accept the updated policy.

13. Contact

help@getformyx.com

Ufuk Gökoğlan
Türkiye