Forma collects nothing. There is no account to create, no analytics, no crash reporting, no advertising and no tracking of any kind. The app has no network layer at all, so there is no server for your training to be sent to.
This policy is also shown inside the app, under Settings → About → Privacy.
Where your data lives
Every workout, exercise, template and measurement you record is written to a single file inside Forma's own storage on your iPhone. Only Forma can read it. Deleting the app deletes that file and everything in it — nobody holds a copy for you, which is why Settings offers a backup you keep yourself.
Apple Health
Health sync is off until you turn it on, and iOS asks your permission when you do. With it on, Forma saves each finished workout to Health as strength training, and reads the active energy and heart rate your watch recorded during that session so the workout can show what you actually did. Those two readings are stored in Forma's own file alongside the workout.
Nothing read from Health is sent anywhere. Health data is never used for advertising or marketing, is never shared with third parties, and is not used for any purpose other than showing you your own workout. You can withdraw the permission at any time in the Health app, under Data Access & Devices.
Sharing and export
Exporting a backup or a CSV hands the file to the iOS share sheet, and it goes wherever you send it. Data leaves the app only when you ask it to, by exporting or by turning on the automatic backup below.
Automatic backup
Automatic backup is off until you turn it on, and it writes nowhere until you choose a folder. When you do, Forma copies the same backup file you could export by hand into that folder, on the schedule you pick.
Forma still has no network layer: it writes a file, and the app you pointed it at — iCloud Drive, Google Drive, Dropbox, or just this iPhone — does whatever moving it does, under your account and that company's terms, not ours. Forma keeps no copy and sends nothing anywhere itself.
A backup written outside the app is no longer covered by the sentence above about only Forma being able to read it. In the folder you chose, it is an ordinary file: readable by apps you give access to that folder, by anyone signed into that account, and by anyone you share the folder with. It contains everything in the app, including the active energy and heart rate read from Apple Health. Backups you have already written stay where they are if you later turn the setting off.
Notifications
The rest timer and unfinished-workout reminders are scheduled on the device by iOS. They are not push notifications; nothing is sent to or from a server to deliver them.
Children
Forma is not directed at children and collects no personal information from anyone, of any age.
Changes
If this policy ever changes, the updated version will ship in the app and replace this page, with the date above revised.