Privacy Policy

Last updated: 21 August 2026

This policy explains what Formyx collects, why, where it goes, and what you can do about it. It is written to be read, not to be skimmed past.

1. Who is responsible

Formyx is operated by Ufuk Gökoğlan, an individual developer based in Türkiye. There is no company behind it — one person builds and runs this app.

For anything in this policy, including requests about your data, write to support@getformyx.com.

Under the GDPR, this makes Ufuk Gökoğlan the "data controller" for your information. Under Turkish law (KVKK), the equivalent term is "veri sorumlusu".

2. What Formyx collects

Formyx is a nutrition and training app, so most of what it holds is information you deliberately enter about your body and your habits. Nothing here is collected silently for advertising — there are no ad networks, no analytics SDKs and no tracking libraries in this app at all.

2.1 Account information

• Email address and password. Passwords are never stored in readable form; only a cryptographic hash is kept.
• If you sign in with Google: your email address, your name, and the URL of your Google profile picture, as provided by Google.
• Technical sign-in records. Our authentication provider records the IP address and browser/device identifier used when you sign in, as a standard security measure. We do not use these for anything else.

2.2 Information about your body and health

This is the sensitive part, and it deserves to be named plainly. Formyx collects and stores:

• Physical characteristics: age, sex, height, current weight, and your weight history over time
• Goals: target weight, chosen pace, activity level, and the calorie and macronutrient targets calculated from them
• Injuries and limitations you declare so that unsafe exercises can be filtered out of your program
• Dietary preference, if you set one
• Meals you log: name, calories, protein, carbohydrates, fat, and the date and time
• Water intake per day
• Workouts you complete: which routine, duration, sets completed, and an estimated calorie figure
• Your training program, which is generated from the answers above

Under the GDPR this counts as special category data — data concerning health. We process it only because you have explicitly asked us to: without it, the app cannot calculate a single number it exists to calculate. You can withdraw that consent at any time by deleting your account (section 7).

2.3 Usage information

Formyx records, per day, how many times you opened the app, how many logging actions you took, and whether you weighed in. This is used to power features you can see — the weekly consistency indicator, the reminder that arrives if you go quiet for a couple of days — and to understand, in aggregate, whether the app is helping people stay consistent. It is never sold and never shared for advertising.

2.4 Photos of your meals

When you photograph a meal, the image is sent to Formyx's server, which forwards it to Google's Gemini API for analysis. The image is never stored on Formyx's servers — it passes through in memory and is discarded once the analysis returns. A copy is kept on your device; the database stores a reference to that file, not the image itself. If you delete the app or your phone clears its cache, those photos are gone.

This routing exists so that the API key is not embedded in the app, where it could be extracted and abused.

Please read this part carefully. The image is transmitted to Google without your name, email or any account identifier attached — Google receives the photo and the question, nothing that identifies you. However, Formyx currently uses the free tier of the Gemini API, and under Google's terms for that tier Google may use the content submitted to improve its services, and that content may be reviewed by humans. If you would rather that not happen, do not photograph anything you would not want reviewed, and use barcode scanning or manual entry instead — both work without sending an image anywhere.

We intend to move to Google's paid tier, where submitted content is not used for service improvement, and this section will be updated when we do.

3. What Formyx does not do

• No advertising. There are no ad networks in this app and no advertising identifiers are collected.
• No selling your data. Not to anyone, in any form, including anonymised or aggregated.
• No tracking across other apps or websites.
• No analytics or crash-reporting services are currently integrated. If that changes, this policy will be updated before they ship.
• No push notification servers. All reminders are scheduled locally by your phone's operating system. Nothing about your reminders leaves your device.

4. Who your data is shared with

Formyx relies on a small number of service providers to function. Each receives only what it needs.

If Formyx adds subscription billing through a payment provider, that provider will receive whatever your app store passes to it in order to manage your subscription, and this table will be updated before that ships.

Formyx may also disclose information where legally required to do so, for example in response to a valid legal order.

5. What is stored on your phone

Some things never leave your device:

• Your sign-in session token
• Your language and unit preferences
• Your notification preferences and reminder times
• A draft of your onboarding answers, if you leave partway through, so you can pick up where you stopped
• An in-progress workout, so a phone call does not lose your sets
• A record of which one-time explanations you have dismissed
• Photos of meals you have logged

Deleting the app removes all of this.

6. How long data is kept

Your account data is kept for as long as your account exists. When you delete your account, it is removed immediately — see section 7.

Technical sign-in logs held by our authentication provider (including IP addresses) follow that provider's own retention schedule and are not under direct control of the app.

7. Deleting your account

You can delete your account from inside the app: Profile → Settings → Delete account. You will be asked to type your email address to confirm, because this cannot be undone.

When you do, the following are permanently deleted: your profile, every meal you logged, your entire weight history, your workout history, your training programs, your calorie and macro targets, your water log, and your usage records. This deletion is immediate and is enforced by the database itself.

One honest exception. Our authentication provider keeps a separate security audit log — a record of sign-in events, including the email address used and the IP address it came from. That log is not linked to your account row and is therefore not reached by the deletion. It is retained according to the provider's own schedule. Everything else is gone.

You may also clear your app data without deleting your account, from Profile → Settings → Reset data.

8. Your rights

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable form. If you are in Türkiye, KVKK Article 11 gives you comparable rights.

In practice:

• Access and correction: most of your data is visible and editable inside the app — Profile, Goals, Progress and the meal log.
• Deletion: section 7.
• Portability: the app does not yet have an export button. Write to support@getformyx.com and your data will be sent to you in a machine-readable format.
• Withdrawing consent: delete your account, or turn off notifications in Settings for that specific processing.

You also have the right to complain to a data protection authority — in the EU, the authority in your country of residence; in Türkiye, the Kişisel Verileri Koruma Kurumu.

Requests are handled by one person, so please allow a reasonable time, and in any case no longer than one month.

9. Children

Formyx is not for anyone under 18. The app calculates calorie deficits and weight-loss targets, and those are not appropriate for children or adolescents without medical supervision.

We do not knowingly collect information from anyone under 18. If you believe a child has created an account, write to support@getformyx.com and it will be deleted.

10. Security

Data is transmitted over encrypted connections and stored with access rules that make each user's rows readable only by that user. Passwords are hashed, never stored in readable form.

No system is perfectly secure, and it would be dishonest to claim otherwise. If a breach affecting your data occurs, you will be informed in line with applicable law.

11. International transfers

The providers listed in section 4 operate internationally, which means your data may be processed outside your country of residence, including in the United States. Where required, these transfers rely on the standard safeguards those providers have in place, such as the European Commission's standard contractual clauses.

12. Changes to this policy

This policy will change as the app changes. When it does materially, the date at the top is updated and, where the change is significant, you will be told inside the app. Continuing to use Formyx after a change means you accept the updated policy.

13. Contact

support@getformyx.com

Ufuk Gökoğlan
Türkiye