FORM
Privacy Policy  ·  Effective date: March 28, 2026  ·  Last updated: March 28, 2026

Privacy Policy

This Privacy Policy describes how FORM ("the App", "we", "us", or "our") handles your information. Please read it carefully before using the App.

The short version: FORM does not collect, transmit, sell, or share any of your personal data. Everything you enter — your name, measurements, photos, and goals — stays on your device and only your device.

1. Information we collect

FORM is a fully offline, on-device application. The App collects only the information you choose to enter directly:

None of this information ever leaves your device. It is stored exclusively in your device's local storage (localStorage) and is not transmitted to any server, cloud service, or third party — including us.

2. Information we do NOT collect

FORM does not collect, access, or process any of the following:

3. How your data is stored

All data you enter is stored locally on your device using standard browser/app local storage. It is not encrypted in transit because it is never transmitted. On iOS, all app data is protected by the device's built-in data protection, which encrypts data when your device is locked.

Photos you add are stored as encoded data within the app's local storage on your device. They are not uploaded to any server or cloud service.

4. Data you choose to share

FORM includes a feature that allows you to generate a summary card (an image) of your progress, including measurements and photos, which you can then share using your device's native sharing capabilities (Messages, Mail, WhatsApp, etc.). This sharing is initiated entirely by you. We have no involvement in or knowledge of what you share, with whom, or when.

When you export a CSV or JSON backup file, that file is saved to your device and is under your full control. We do not receive or have access to any exported files.

5. Third-party services

The App loads two open-source libraries from a content delivery network (CDN) operated by Cloudflare (cdnjs.cloudflare.com):

Loading these libraries involves a standard HTTPS request to Cloudflare's servers, which may log your device's IP address as part of normal CDN operation. This is governed by Cloudflare's Privacy Policy. We do not receive any data from this interaction.

The App also loads fonts from Google Fonts (fonts.googleapis.com). This involves a standard HTTPS request governed by Google's Privacy Policy. We do not receive any data from this interaction.

We have no other third-party integrations. There are no analytics, no advertising networks, no tracking pixels, and no data brokers.

6. Push notifications

FORM may request permission to send you local push notifications for weekly check-in reminders and milestone celebrations. These notifications are generated and delivered entirely on your device. No notification data is sent to or processed by us. You can disable notifications at any time in your device's Settings.

7. Children's privacy

FORM is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe your child has used the App, please note that all data remains on the device and can be deleted by clearing the app's data in your device settings.

8. Data retention and deletion

Your data persists on your device until you choose to delete it. You can delete all your data at any time from within the App by going to Settings → Clear Data. You can also delete all app data by uninstalling the App from your device. Because we never receive your data, there is nothing for us to delete on our end.

9. Your rights

Because we do not collect or store any of your data on our systems, most data subject rights (such as right to access, rectification, or erasure under GDPR or CCPA) are fulfilled automatically — you have complete control over your data at all times within the App. If you have questions, please contact us using the details below.

10. California residents (CCPA)

FORM does not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. As FORM does not collect personal information from you on our systems, there is no personal information for us to disclose, delete, or correct on our end.

11. International users (GDPR)

FORM is available worldwide. Because we do not collect, transmit, or store personal data on any server, there is no cross-border transfer of personal data. Your data never leaves your device, so GDPR transfer restrictions do not apply. If you reside in the European Economic Area and have questions about your rights, please contact us.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

13. Apple App Store — Privacy Nutrition Label

In accordance with Apple App Store requirements, here is a summary of data practices for the App Store privacy label:

The only data processing occurs locally on your device and is not "collected" as defined by Apple's App Store privacy guidelines, as it is never transmitted off-device.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

FORM — Body Intelligence
Email: support@vacay.work