Consumer Health Data Privacy Policy
Last updated October 1, 2026
Weight, meals, workouts, cycle dates, lab results and body scans are health data, and some US states give them special protection. This page lists exactly which health data FitbyForm collects, why, who else handles it, and how to see it, withdraw your consent or delete it. We apply it to everyone, wherever you live.
Who This Covers
This policy is provided by Alex Wtorkowski, sole proprietor, operating FitbyForm (“FitbyForm”, “we”, “us”, “our”), which runs the FitbyForm app and fitbyform.com. It supplements our Privacy Policy and is written to meet the Washington My Health My Data Act, Nevada’s consumer health data law (SB 370) and Connecticut’s consumer health data rules. Where this page and the Privacy Policy differ on health data, this page wins.
Categories of Consumer Health Data We Collect
| Category | What it includes in FitbyForm |
|---|---|
| Body measurements | Weight, body fat, height, start and goal weight, birth year (encrypted) |
| Reproductive health | Menstrual cycle dates, symptoms and notes (encrypted), and the cycle phase worked out from them. Only if you turn cycle tracking on. |
| Nutrition and diet | Meals you log, in words or from a photo, food likes and dislikes, and calorie and protein targets (targets encrypted) |
| Physical activity | Workouts and steps, whether you log them or they come from Apple Health if you connect it, and sleep and readiness if you connect Oura |
| Vital signs and sleep | Heart rate, resting heart rate, blood oxygen, blood pressure, breathing rate and sleep times (encrypted), from Apple Health or Oura, only if you turn on Sleep and Vitals reading |
| Blood test results | Test names, values, units, your lab’s reference ranges and flags, collection dates and the lab named on the report (encrypted). Only if you add them in Lab Results and Scans. |
| Body composition scans | DEXA body fat, lean and fat mass by region, visceral fat, bone density values, statements printed on your report and the scanner type (encrypted). Only if you add them. |
| Uploaded reports | The PDF, CSV or photo of a lab report or scan you upload, kept in private storage |
| Your Labs answers | Your Labs consents, your answers to our safety questions (for example pregnancy, certain medications, a kidney condition or an eating disorder), the Focus modes you choose and your answers about the days before a test (encrypted) |
| Images of your body | Progress photos you choose to post |
| Inferences | Calorie targets, cycle phase, meal plan notes, nutrient targets from a Focus mode you choose, and training suggestions, worked out from the data above |
We do not collect precise location, and we do not set up geofences around health care facilities or anywhere else.
Where It Comes From
- From you, when you sign up and when you log, post or set a goal.
- From Apple Health on your iPhone (steps and workouts), only if you connect it.
- From Oura, only if you connect it.
- From lab reports, scan reports and CSV exports you upload, or numbers you type.
- From food databases (USDA FoodData Central) for the nutrients in meals you log.
- From our own calculations on what you entered (targets and cycle phase).
Why We Collect It
- To provide the features you ask for: logs, charts, streaks, targets, meal plans and cycle tracking.
- To run AI features you have agreed to, such as reading a meal you typed or photographed, or reading the numbers off a lab or scan report you upload.
- To show your lab and scan results back to you exactly as reported, and, only if you choose a Focus mode, to shape your meal plans and training suggestions. Your safety answers switch food and training targets off.
- To show what you choose to share, such as a post, to the people you choose.
- To keep the service secure and to act on reports of abuse.
We do not use health data for advertising or marketing, and we do not sell it. We collect and share it only with your consent. When you start, the app asks for it in a box of its own, separate from agreeing to the Terms: consent to FitbyForm collecting and using your health data (weight, meals, workouts and cycle, if you turn it on) as described on this page. It asks again, separately, before the first AI feature runs. Cycle tracking and connected services are each off until you turn them on. Lab Results and Scans asks for two more consents of its own, each separate: one to collect and keep your lab and scan data, and one to send a report you upload to our AI reading provider so it can read the numbers. You can say no to the second and type the numbers or upload a CSV export instead.
Who We Share It With
We share health data only as needed to provide what you asked for, with these categories of recipients:
| Recipient | What they receive, and why |
|---|---|
| Supabase | Stores the database and the reports you upload, in private storage. Sensitive values are encrypted before they arrive. |
| Vercel | Runs the servers that handle your requests. |
| Cloudflare R2 | Stores the progress photos you post. |
| PostHog | The fact that an action happened, such as a meal or a weigh-in being logged, under a random browser id, to measure which features are used. Never a value, such as a weight or a calorie count, and never your name, email or account id. |
| Sentry | Error reports, to fix what breaks. They are built to leave out health values. |
| Anthropic, OpenRouter, Google (Gemini), OpenAI, Vercel AI Gateway and TypeSafe (Jev) | Only after you agree in the app: the meal text or photo, targets and food preferences, and your cycle phase if you track it, to run the AI features. A lab or scan report you upload goes to OpenRouter, which passes it to Google (Gemini), only after you agree to have it read, and only that one file. Data from Oura and your vital signs are never sent to any AI provider. The full table is in the Privacy Policy. |
| People you choose | Posts go to your followers, and proof you post in a group goes to that group’s members. A cycle phase goes only to a follower you pick, and never your dates. Step progress as a percentage of your goal, to members of a challenge circle you are in, only if you turn it on. Never your step count. |
Each of these companies processes the data on our behalf and not for its own purposes. Apple Health and Oura are sources, not recipients: we read from them only if you connect them, and send them nothing about your health. We have no affiliates that receive health data. We never share it with advertisers, data brokers or insurers. We disclose it to a government or law enforcement only as described in Law Enforcement Requests.
Your Rights
- Confirm and access. Ask whether we hold your health data and get a copy of it.
- Know who has it. Ask for the list of third parties and affiliates we have shared it with, and how to contact them.
- Withdraw consent. Turn off AI features, cycle tracking or a cycle share in the app, or ask us to stop any processing. To withdraw your consent to health data altogether, delete your account (see below) or email us.
- Delete. Delete your health data. Lab Results and Scans has Delete All Lab and DEXA Data, which removes every uploaded file, every value and your Labs settings at once. What our storage and hosting providers hold for us goes with it. AI providers keep request data only as long as their API terms allow (Anthropic, for example, deletes API data within 30 days).
- No penalty. Using these rights never changes the price or quality of anything else in FitbyForm.
How to Delete It
In the app: Profile, then Settings, then Delete Account. Your profile, logs, posts, cycle data, the photos you posted and your encryption key are deleted straight away, and any Oura connection is revoked. Deleting the key makes the encrypted values unrecoverable, including in backups, which expire on their normal schedule. You can also delete single weigh-ins, meals, cycle entries and posts one at a time.
How We Protect It
Sensitive values are encrypted with a key unique to you (AES-256-GCM), wrapped by a master key kept outside the database. Uploaded reports sit in private storage no other user can list or read, and a link to your own file lasts 5 minutes. Lab data is never synced to iCloud, never shown to your friends or followers, and never sent to analytics.
Breaches
If unsecured health data is accessed without authorization, we will notify the people affected within 60 days, and notify the FTC and, where required, the media, as the FTC Health Breach Notification Rule requires.
How to Make a Request
Email support@fitbyform.com from the address on your account, and say which right you want to use. We may ask you to confirm the request from inside the app so we know it is you. We answer within 45 days, and tell you if we need up to 45 more.
Appeals
If we turn down a request, you can appeal by replying to our answer with the word “Appeal”. Someone who did not make the first decision will review it and reply within 45 days, with the reasons. If you are still not satisfied, you can contact the Attorney General of the state where you live. In Washington that is the Washington State Office of the Attorney General, at atg.wa.gov.
Not Medical Advice
FitbyForm is a general wellness app. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Lab and scan results are shown exactly as your lab reported them; consult a healthcare professional for medical advice. Targets, meal plans, workouts and cycle estimates are general information, and cycle estimates are not contraception. See Terms of Service for the full wording.
Changes
If we change what health data we collect, why, or who receives it, we will update this page and ask for your consent again before we use your data in the new way.
Contact
Alex Wtorkowski, sole proprietor, operating FitbyForm, support@fitbyform.com.
Questions about any of this: support@fitbyform.com
fitbyform is operated by Alex Wtorkowski, sole proprietor, operating FitbyForm.