Privacy Policy for Form Focus Mobile Application

Effective Date: January 14, 2026 Last Updated: August 28, 2026

Introduction

This Privacy Policy ("Policy") applies to the Form Focus mobile application ("App") operated by Form Focus LLC ("Company," "we," "us," or "our"). Form Focus is a mobile application that provides exercise form feedback by analyzing user-recorded video with machine learning models.

By using the Form Focus app, you consent to the data practices described in this Policy.

Privacy requests: Use the secure request form displayed with this Privacy Policy on www.formfocusllc.com.

Registered office for legal notices only: Form Focus LLC, 5900 Balcones Drive, Suite 100, Austin, Texas 78731, United States

Information We Collect

Information You Provide

We do not require you to create an account to use Form Focus. The app processes your workout videos locally on your device and does not automatically upload them to our servers.

However, you may voluntarily provide the following:

• OpenAI API Key (optional): If you choose to use AI-powered analysis features, you must provide your own OpenAI API key. This key is stored locally on your device using encrypted Android storage and is never transmitted to Form Focus servers.
• Submitted Requests: If you submit a website form, we may collect your optional name, email address, request category, request details, document context, and acknowledgment choices. Legal contact submissions are sent through a protected Firebase callable function and stored in Firebase Firestore so we can review and respond.
• Content Moderation Reports: If you report inappropriate content or if content is flagged by our automated moderation system, we collect the reported content, timestamp, and device information for review.

Information Collected Automatically

Device Information:

• Device model, manufacturer, and operating system version
• App version and build number
• Device performance metrics (CPU, GPU, memory capabilities)
• App-generated identifiers used for security, abuse prevention, crash diagnostics, moderation logs, and Terms acceptance records. These may include a Firebase anonymous Authentication UID and Android ID.

Note: We analyze device type to optimize pose detection performance for your specific hardware. We do NOT collect:

• Location data
• Contacts
• Usage analytics or feature tracking
• Names or account profile information unless you voluntarily contact us

Crash Reports:

• When the app crashes, we automatically collect crash logs via Firebase Crashlytics to help us identify and fix bugs
• Crash logs may include device information, app state at time of crash, and stack traces
• Crash logs do NOT include your videos or personal workout data

Video and Pose Data

Local Processing:

• Videos you record or select are processed entirely on your device
• Pose detection, form analysis, and workout metrics are computed locally
• Videos are stored only on your device and are NOT uploaded to our servers
• You have full control to delete videos at any time

Optional AI Analysis (User-Initiated):

• If you choose to use AI-powered feedback features, you may send workout data to OpenAI using your own API key
• This is entirely optional and requires your explicit action
• Data sent includes workout metrics, form analysis results, and your questions—NOT your raw video
• If you attach files or images to an AI conversation, the selected attachment content may be sent to OpenAI as part of that request
• See Section 3 for details on AI data sharing

Generative AI Features and Data Sharing

How AI Features Work

Form Focus offers optional AI-powered feedback features that use OpenAI's language models to provide personalized exercise feedback and answer questions about your form.

Important:

• AI features are entirely optional—you can use the full app without them
• You must provide your own OpenAI API key to use AI features
• We do NOT provide API access or create accounts on your behalf
• Your API key is stored only on your device and is never sent to Form Focus servers

Data Sent to OpenAI

When you use AI features with your own API key:

What IS Sent:

• Workout metrics (reps, angles, velocities, form analysis results)
• Your questions or prompts about exercise form
• Context about the exercise being performed
• Any files, images, or extracted text that you intentionally attach to the AI conversation

What IS NOT Sent:

• Your raw video files
• Your personal information (name, email, etc.)
• Your Firebase anonymous UID, Android ID, or device identifiers

Content Moderation

To comply with Google Play policies and OpenAI's usage requirements, we perform content moderation on user inputs:

• User queries are sent to OpenAI's Moderation API before being processed
• The Moderation API checks for prohibited content (violence, hate speech, explicit content, etc.)
• If content is flagged as violating policies, it is:
  • Blocked from being processed
  • Logged to Firebase Firestore with timestamp, category, content length/hash or report details, and app/device security identifiers where needed for abuse prevention
• Flagged content is retained for compliance, abuse prevention, and model improvement

User Reporting:

• You can report inappropriate AI-generated content using the in-app report feature
• Reported content is stored in Firebase Firestore for review by our moderation team

Your Control Over AI Features

• You can disable AI features at any time in app settings
• You can delete your API key from the app at any time
• Your relationship with OpenAI is governed by OpenAI's Terms of Service and Privacy Policy
• We have no control over OpenAI's data retention or usage practices

OpenAI's Policies: https://openai.com/policies/privacy-policy https://openai.com/policies/terms-of-use

Third-Party Services

Form Focus uses the following third-party services:

Firebase (Google)

Firebase Crashlytics:

• Collects crash reports and diagnostics
• Helps us identify and fix bugs
• Data collected: device info, app state, stack traces
• Privacy Policy: https://firebase.google.com/support/privacy

Firebase Firestore:

• Stores content moderation logs and user reports
• Data is encrypted in transit and at rest
• Privacy Policy: https://firebase.google.com/support/privacy

Firebase Authentication:

• Used for anonymous authentication for moderation, reporting, and abuse prevention workflows
• The app does not require you to create a user account or provide a name, email, or password
• Firebase may create an anonymous UID scoped to the app

OpenAI (User-Initiated Only)

• Used only when you provide your own API key and explicitly use AI features
• See Section 3 for details
• Privacy Policy: https://openai.com/policies/privacy-policy

Google Play Services

• Required for app installation and updates
• May collect device identifiers and usage data as described in Google's Privacy Policy
• Privacy Policy: https://policies.google.com/privacy

How We Use Your Information

We use collected information for the following purposes:

• App Functionality: To provide pose detection, form analysis, and workout tracking
• Performance Optimization: To optimize the app for your device's capabilities
• Bug Fixes: To identify and resolve crashes and technical issues
• Content Moderation: To comply with Google Play policies and prevent abuse
• Customer Support: To respond to your inquiries and provide assistance
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

We do NOT:

• Sell your data to third parties
• Use your data for advertising or marketing purposes
• Track your location or personal activities
• Share your workout videos with anyone

Data Retention and Deletion

Data Stored on Your Device

• Videos, workout data, and your OpenAI API key (if provided) are stored only on your device
• You can delete this data at any time through the app or by uninstalling the app

Data Stored on Our Servers

Crash Reports (Firebase Crashlytics):

• Retained for up to 90 days
• Automatically deleted after retention period

Moderation Logs (Firebase Firestore):

• Flagged content and user reports are retained for compliance and abuse prevention
• You can request deletion through the secure request form displayed with this Privacy Policy on www.formfocusllc.com
• We may retain data if legally required (e.g., ongoing investigation)

Terms Acceptance Records (Firebase Firestore):

• Terms acceptance records may include Android ID, app version, device model, Android version, acceptance timestamp, accepted terms version, and terms document URL
• These records are retained for legal compliance and audit purposes

Submitted Requests:

• Retained only as long as reasonably necessary to respond, verify compliance, resolve disputes, and meet legal obligations
• You can request deletion at any time

Right to Deletion

You have the right to request deletion of any personal information we have collected. To exercise this right, use the secure request form displayed with this Privacy Policy on www.formfocusllc.com and choose "Delete or correct my data." We may ask for additional information to verify your identity or authority to act for another person.

We will respond within 30 days and delete your data unless we are legally required to retain it.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights:

Your Rights

• Right to Know: You may request details on what personal data we collect, use, and share.
• Right to Delete: You can request deletion of personal data, subject to certain legal exceptions.
• Right to Correct: You may request corrections to inaccurate personal information.
• Right to Opt-Out: You can opt out of the sale or sharing of personal data for advertising. (Note: We do NOT sell your data.)
• Right to Restrict Sensitive Data Use: You may limit the use of sensitive personal information.
• Right Against Retaliation: We will not discriminate against you for exercising your rights.

How to Exercise Your Rights

Use the secure request form displayed with this Privacy Policy on www.formfocusllc.com. The form supports access, deletion, correction, opt-out, restriction, and appeal requests.

We will respond to your request within 45 days.

Personal Information We Collect (CCPA Categories)

Children's Privacy

Form Focus is NOT intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are under 18, you may use Form Focus only with the permission of a parent or guardian.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information immediately. If you believe we have collected information from a child under 13, use the secure request form displayed with this Privacy Policy and describe the concern without including unnecessary information about the child.

Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, or destruction:

• Local Storage: Videos and pose data are stored on your device using Android's secure storage APIs
• Encryption in Transit: Data sent to Firebase and OpenAI is encrypted using HTTPS/TLS
• Encryption at Rest: Firebase Firestore data is encrypted at rest
• Encrypted Local API Key Storage: Your OpenAI API key is stored with Android encrypted preferences. If encrypted storage is unavailable, the app refuses plaintext API key storage.
• Access Controls: Access to moderation logs is restricted to authorized personnel only

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

International Users

Form Focus is controlled and operated from the United States. If you access the app from outside the U.S., your information may be transferred to, stored, and processed in the United States.

By using the app, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make significant changes, we will notify you by:

• Displaying a notice in the app
• Sending an email (if you have provided your email address)
• Updating the "Last Updated" date at the top of this Policy

Your continued use of the app after changes are made constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically.

Your Choices and Controls

Permissions

Form Focus requests the following permissions:

• Camera: Required to record workout videos
• Microphone: Optional—used to record audio with videos
• Storage/Media: Required to save and access workout videos
• Notifications (optional): To notify you when video processing is complete

You can revoke permissions at any time through your device's settings. However, the app may not function properly without required permissions.

AI Features

• You can enable or disable AI features in app settings
• You can delete your OpenAI API key at any time
• Disabling AI features does not affect core pose detection functionality

Data Deletion

• Delete videos and workout data directly in the app
• Uninstall the app to remove all locally stored data
• Use the secure privacy request form to request deletion of server-side data such as moderation logs

Contact Us

Use the secure request form displayed on this page for questions, concerns, deletion or correction requests, appeals, and other inquiries about this Privacy Policy or our data practices.

Registered office for legal notices only:

Form Focus LLC, 5900 Balcones Drive, Suite 100, Austin, Texas 78731, United States

We will respond to your inquiry within 30 days.

Acknowledgment

By using Form Focus, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with this Policy, please do not use the app.

End of Privacy Policy