ΦΥΛΑΞ · Privacy

Your data is yours.

Formad plans your day around your work and follows your food, sleep and training. This page says what data that takes, what it is used for, where it is kept and how you delete it.

In effect from 26 October 2026. På svenska

Who is responsible

Formad is run by Zaniar Azarniya through the sole proprietorship Infrakust Azarniya, and he is the data controller. Send questions about your data to hello@infrakust.se.

What we store

Your account

• Your e-mail address, and your name if you sign in with Google.
• One sign-in per device. We store only a checksum of it, never the key itself.

What you put into the app

• Your work schedule, the day's routines and what you have ticked off.
• Your profile: year of birth, height, sex, weight, goal, training habits, equipment, what you want extra focus on and exercises you want to skip, injuries and weak spots, whether you take performance-enhancing drugs, allergies and food you do not eat.
• The food you log: foods, amounts and nutrition values, meal by meal.
• The workouts you log, with exercises and sets, and your routines.
• How you feel on the day, notes and goals.
• Which pages of the app you have opened: one date per page and day, for the last 31 days.

What you connect yourself

• Samsung Health through Health Connect: in the app from Google Play, after you say yes under Settings and give the app read access in Health Connect: steps, calories, distance, workouts with heart rate, sleep with sleep stages, weight, body fat, lean mass, fitness (VO2 max), resting heart rate, HRV and food. The app also reads in the background, once an hour. The data is kept in your account and used only for your figures in the app and, if you have turned Mentor on, for Mentor's advice. It is not sold, not shared with anyone else and not used for advertising. Formad only reads, and writes nothing to Health Connect. You turn it off under Settings → Samsung Health and remove the access in Health Connect. The use follows the Health Connect Permissions policy, including the Limited Use requirements.
• Apple Health: in the app from the App Store, after you say yes under Settings and give the app read access in Health: steps, calories, distance, workouts with heart rate, sleep with sleep stages, weight, body fat, lean mass, fitness (VO2 max), resting heart rate, HRV and food. The app reads when you open it, not in the background. The data is kept in your account and used only for your figures in the app and, if you have turned Mentor on, for Mentor's advice. It is not sold, not shared with anyone else, not used for advertising and not sent to iCloud. Formad only reads, and writes nothing to Health. You turn it off under Settings → Apple Health and remove the access in Health under Profile → Apps → Formad. The use follows Apple's rules for HealthKit.
• Personalkollen: if you connect your account there, your schedule and your punches are fetched, only your own.
• Instämpling: hours you work from home.

Mentor, the AI in the app

• Mentor is part of the Bas, Pro and Max plans, and is used only if you have said yes in the app. Without your yes, nothing is sent to the AI: no questions, reports or pictures. You take back your yes under Settings → Mentor, and the rest of the app works as before.
• Your conversations with Mentor are kept on your phone. Mentor's reports and notes are kept in your account.
• If something breaks in the app, the error's text is sent to us with the last buttons you tapped (what was tapped, never what you typed) and which phone and version it is. It is kept in your account so we can find and fix the fault. Only the latest 30 are kept, and they are deleted when you delete your account.
• If you report an answer from Mentor (Report the answer), the answer, your question and what you wrote are kept in our database, so we can see what went wrong and correct Mentor. They are deleted when you delete your account.
• If you take a picture of your food, it is sent to the AI to recognise what is on the plate and how much. The picture is not stored, only what you choose to log.
• If you send Mentor a picture in the conversation, a photo or a picture from your phone, it goes to the AI with your question so that Mentor can answer it. The picture counts with the question against your plan's limits. We do not keep it, neither in your account nor in the conversation on your phone, which only says that the question had a picture.
• If you speak a question with the microphone, your speech becomes text in the question field, where you can change it before you send it. The phone's or the browser's own speech recognition does this (Google's on Android, Apple's on iPhone), which may send the sound to Google or Apple to turn it into text. No sound is sent to us or to Mentor, only the question if you send it. The microphone is on only while its button is lit.
• How many AI calls you have made and what they cost, so that the limits of your plan can be kept.

Notifications

• An address from your browser that lets the app send reminders to your phone. In the app from Google Play it is instead a key from Google's service Firebase, and in the app from the App Store a key from Apple, which the app gets when you allow notifications.

Security

• When you sign in, the attempts are counted for your e-mail address and your IP address, so that nobody can guess their way to your code. They are stored only as a checksum that cannot be turned back into the address, stop counting after an hour and are deleted after two. Every sign-in attempt is also written to a log, with the address and the IP address as the same kind of checksums, and the log is deleted after 90 days. When you ask for a code, Cloudflare first checks that a person is asking.

Health data

This section is a draft and has not been legally reviewed. It follows the Swedish policy, which applies if the two differ.

Weight, sleep, heart rate, food, how the day feels, injuries, performance-enhancing drugs and the like are sensitive data about health. This is how you decide over them:

• What you enter yourself: the app keeps it only after you have said yes to that. You are asked the first time you open the app, and the yes is under Settings → Account → Your consents. If you say Not now the app still works: you can plan your day, your shifts and your routines, but the app does not ask for your weight, body, sleep or food and keeps no such data. What you enter is used only to plan your day, work out your burn and goals and show your progress, and for Mentor's advice if you have turned Mentor on. Without your yes, Mentor does not read it and keeps nothing new about you.
• Samsung Health and Apple Health: the app reads only after you have said yes under Settings and given the app permission.
• Mentor: nothing is sent to Anthropic in the USA until you have said yes to Mentor.

Each yes is kept with the date and the text you answered, and if the text changes the app asks again. You take it back in the same place you gave it, and the app then asks whether what is already there should be erased:

• Erase: the health data is removed from your account at once. For what you entered yourself, that is your weight and target weight, sleep, food, how the day felt and what you wrote about your body under About you. For Samsung Health and Apple Health, it is everything that was read. In both cases Mentor's reports are erased too, as they sum up the health data. What Mentor remembers about you stays, and you see and remove it under What Mentor remembers about you.
• Keep: the data stays in your account, but the app keeps nothing new and Mentor does not read it, until you say yes again.

You can also erase what you entered yourself at any time, with or without a yes: Settings → Account → Erase my health details. Mentor's reports are erased then too. If you have said yes, you remove a single entry, such as a weight or something you ate, in the app where it is. Without a yes, you remove what you ate under Food, and everything else at once with Erase my health details. When you turn Mentor off, nothing more is sent to Anthropic.

What the data is used for

• To work out your day around your shifts, remind you and show your progress.
• To work out your burn, calorie goal and trends from your weight and food.
• To let Mentor answer your questions and write your reports, if you have said yes to it.
• To protect the sign-in against guessing.
• To sync between your devices.
• To improve the app. We count how many use each part, for example the food log, the training and which pages are opened, to learn what works. The owner of the app also sees how each person uses it: your email address, when you started, on how many days you used the app and when you last did, and on how many days you logged food and workouts. It is shown to the owner alone and used for nothing else. The owner and the owner's AI tool Claude, from Anthropic, can also read sums of how the app is used, for example how many were active in the last week or logged food. The sums are worked out from everyone's use, but they hold nothing about any single person: no email address, no id, no name and no dates per person. Small numbers are hidden: a count under 5 reads "<5", and a count less than 5 from the whole, for example all the accounts, is not shown either.

We do not use it for advertising, do not sell it and do not share it with anyone beyond the services below.

Who helps us

Some of the services are in the USA. The transfer then takes place under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

On your phone

The app keeps a copy of your data in the phone's browser, so that it works without a connection. It is used only by the app. We use no tracking or advertising cookies.

How long we keep it

• Your account and your data are kept until you delete the account.
• Reports are cleared as you go: the latest 60 daily reports, 30 weekly reports and 24 monthly reports are kept.
• When you delete your account, everything is removed at once, reports included. Of the AI calls only one row per call is kept, with nothing that ties it to you: when it was made, which feature and what it cost. They are needed for the app's shared ceilings on AI costs to add up, and it cannot be seen whose they were.
• An answer from Mentor is kept for up to 10 minutes in our database at Supabase, so that the app can fetch it again if the connection was lost while you waited. After that it is removed, and it is removed at once if you delete your account.
• What shows a payment (Stripe's or Apple's ids, the plan, the amount and the date) is kept for seven years, as the Swedish Bookkeeping Act requires, also after the account is deleted.

Delete your account and your data

You can delete the account and everything in it in three ways:

• In the app: Settings → Account → Delete the account. You type your e-mail address to confirm.
• Without the app: open Formad in a web browser (To Formad), sign in with the same e-mail address and do the same: Settings → Account → Delete the account.
• By e-mail: write to hello@infrakust.se from the address you sign in with, and we will help you delete the account.

What is deleted at once: the account and the sign-in, the days and settings, the food, the workouts, the health data and the reports. Your conversations with Mentor are only on your phone and go when you sign out or remove the app.

A plan through the App Store or Google Play is not cancelled when the account is deleted, because only you can cancel it there: on iPhone under Settings → your name → Subscriptions, on Android in Google Play under Payments & subscriptions. Cancel it first, so that nothing more is charged.

What is kept: what shows a payment (Stripe's or Apple's ids, the plan, the amount and the date) for seven years, as the Swedish Bookkeeping Act requires, and one row per AI call with nothing that ties it to you (when it was made, which feature and what it cost). More under How long we keep it.

Your rights

• See and get your data: Settings → Account → Export your data gives you the days, the food, the training, the health data, the reports and the AI use as a file. Your conversations with Mentor are only on your phone and are not in it.
• Correct: change it in the app, or get in touch.
• Delete: see Delete your account and your data above.
• Object or restrict: get in touch and we will help you.
• Complain: you can turn to the Swedish Authority for Privacy Protection (IMY), imy.se.

Age

Formad is for people who are 18 or older. The app counts calories and weight, and it is not meant for children and young people.

Changes

If the policy changes in a way that matters to you, we say so in the app before it takes effect.

This is a translation of the Swedish policy. If they differ, the Swedish one applies.