Formly

Privacy Policy

Last updated: June 23, 2026

This Privacy Policy describes how Formly ("we", "us", "our") collects, uses, and protects your information when you use the Formly mobile application. By creating an account you agree to the practices described here.

1. Information We Collect

2. How We Use Your Information

To provide habit tracking, streak calculations, shared challenges, trophy achievements, journal storage, AI coaching insights for Pro users, and to communicate with you about account or service changes. We do not sell your personal data.

3. Third-Party Services

4. Apple Health (HealthKit)

Formly can optionally read selected Apple Health metrics on your device when you explicitly link a habit to one. Currently supported reads:

This data is read only on-device and used solely to auto-complete the matching habit when you reach your daily target. We never transmit, sell, share, or store your Apple Health data on our servers, and never use it for advertising, profiling, or data mining. Formly does not write any data back to Apple Health. You can revoke access at any time from iOS Settings → Privacy & Security → Health → Formly, or by removing the metric from a habit in the app.

5. Friends & Shared Challenges

When you add someone as a friend or join a shared challenge, your username, friend code, and check-ins for that specific challenge become visible to those participants. You control what else friends can see via Settings → Privacy — challenges, trophies, and streaks each have independent toggles. Personal habits and journal entries are always private.

6. Your Choices & Rights

You can: edit or delete any habit, journal entry, or challenge you own; leave a shared challenge; remove friends; toggle what friends can see; and request full account deletion at any time by emailing formlysupport@gmail.com. We honour GDPR / UK-GDPR / CCPA requests for access, correction, portability, and erasure.

7. Data Security

Passwords are hashed with bcrypt. API traffic is served over HTTPS. Data at rest is stored in access-controlled MongoDB clusters. No transmission is 100% secure — if you believe your account has been compromised, contact us immediately.

8. Data Retention & Deletion

Your data is retained while your account is active. Deletion requests are processed within 30 days of confirmation and remove: your user record, habits, completions, journal sections and entries, challenge check-ins, and friendships. Content shared into group challenges (e.g. group check-ins that are part of another participant's history) may be anonymised rather than deleted to preserve others' streak data.

9. Age Rating & Young Users

Formly is rated 9+ on the App Store. We collect minimal personal data (email, username, and the habits you choose to track) and never include advertising, third-party trackers, or inappropriate content. Some features — such as AI Coach conversations, community challenges, and user-generated journal entries — may include mature or reflective themes suited to older children and teens. If you are under 13, we recommend you use Formly with a parent or guardian's awareness. Parents or guardians who believe a child under the permitted age has created an account without their consent can email formlysupport@gmail.com and we will delete the account and associated data within 30 days.

10. International Transfers

Our servers may be located in jurisdictions different from yours (primarily the United States). By using Formly you consent to the transfer of your information to those jurisdictions.

11. Changes

We may update this policy. Material changes will be announced in-app and the "Last updated" date at the top will change. Continued use after an update constitutes acceptance.

12. Contact

Privacy questions or deletion requests: formlysupport@gmail.com.

Support: formlysupport@gmail.com · Privacy · Terms