Privacy Policy

1. Introduction

TrueForm AI ("we", "us", or "our") is operated by Batak Solutions AB, a company registered in Sweden. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the TrueForm AI mobile application (the "App").

We are committed to transparency and protecting your privacy. This policy describes our actual data practices in clear language.

2. What Data We Collect

TrueForm AI collects the following categories of personal data to provide our AI-powered physique analysis service:

2.1 Account & Authentication Data

• Sign in with Apple: When you sign in with Apple, we receive your Apple ID user identifier, email address (or a private relay email if you choose to hide your email), and your name (if provided)
• Account Identifier: A unique user ID to identify your account across devices

2.2 Personal Profile Information

• Basic Information: Name, gender, date of birth (age)
• Physical Metrics: Height, weight, body type
• Fitness Information: Training experience level, fitness goals, training frequency, transformation timeline, training barriers
• Profile Photo: Optional profile picture for personalization

2.3 Social Profile & Connections

• Public Profile: Display name, username, and optional avatar that are visible to other users
• Friends List: Your connections with other TrueForm AI users
• Friend Requests: Pending incoming and outgoing friend requests

2.4 Body Analysis Photos

• Physique Photos: Photos of your body captured via camera or selected from your photo library for AI analysis
• Analysis Results: AI-generated scores, body metrics, genetic advantages, and recommendations based on your photos
• Progress Photos: Historical photos and analysis results stored to track your transformation over time
• Shared Scans: When you share a scan with friends, the scan image and analysis results are stored in iCloud and visible to your friends

2.5 Workout & Progress Data

• Training Plans: AI-generated or user-uploaded workout routines
• Workout History: Completed workouts, exercise completion status, training streaks
• Progress Metrics: Weight changes over time, scan frequency, consistency tracking

2.6 Social Activity Data

• Activity Feed: Your workout completions and shared scans visible to friends
• Reactions: Reactions you give or receive on shared content (fire, strong, love, nice)
• Nudges: Motivational nudges sent between friends

2.7 Technical & Usage Data

• Device Information: Device model, operating system version, app version
• Analytics: App usage patterns, feature interactions, crash reports (anonymized where possible)
• Subscription Data: Purchase receipts, subscription status, entitlements
• iCloud Sync: Data synchronized across your devices via Apple iCloud

3. How We Use Your Data

3.1 AI-Powered Body Analysis

We use your photos and personal information to:

• Analyze your physique using advanced AI models
• Generate TrueForm scores and body part metrics
• Provide personalized training and nutrition recommendations
• Track your progress over time through comparative analysis
• Contextualize analysis results using your age, height, weight, and fitness goals

3.2 Personalized Training Plans

We use your profile data and fitness goals to:

• Generate customized workout plans using AI
• Track workout completion and progress
• Provide workout reminders and motivation
• Adapt recommendations based on your progress

3.3 Social Features

If you choose to use our social features, we use your data to:

• Enable you to connect with friends and view their fitness activity
• Share your workout completions and scan results with your friends
• Allow friends to react to your shared content and send motivational nudges
• Display an activity feed showing your friends' recent workouts
• Send push notifications for friend requests, accepted requests, and nudges

3.4 Cloud Sync & Account

When you sign in with Apple, we use your account to:

• Sync your workout plans, progress, and settings across all your Apple devices
• Restore your data when you reinstall the app or get a new device
• Enable social features that require user identification

3.5 App Functionality & Improvement

• Enable premium features based on your subscription status
• Send notifications for workout reminders and progress updates (with your permission)
• Analyze app usage to improve features and fix bugs
• Provide customer support when you contact us

4. Third-Party Services & Data Sharing

We share your data with the following third-party services to provide TrueForm AI's functionality:

4.1 What Your Friends Can See

When you use social features, the following information is visible to your accepted friends:

• Your display name, username, and avatar
• When you complete workouts (activity feed)
• Scans you explicitly choose to share with friends
• Your total workout count and current streak

Your friends cannot see: Your weight, body measurements, private analysis results (unless shared), gym notes, or any data you haven't explicitly shared.

5. Data Storage & Security

5.1 Where Your Data is Stored

• On Your Device: Photos, analysis results, workout plans, and progress data are stored locally on your iPhone using encrypted device storage
• Apple iCloud (CloudKit): When signed in, your account data, workout progress, social connections, and shared content are stored in Apple's iCloud infrastructure. This enables sync across your devices and powers social features. Apple stores this data according to their privacy practices.
• OpenAI Servers: Photos are transmitted temporarily to OpenAI for analysis (retention: 30 days per OpenAI's policy, then deleted)
• Our Servers (EU): Minimal data such as subscription status and account identifiers are stored on secure servers hosted in the European Union

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted to OpenAI and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Photos and data stored on your device are protected by iOS device encryption
• API Security: Secure API keys and authentication tokens with limited access
• Access Controls: Role-based access to internal systems on a need-to-know basis

6. Data Retention & Deletion

6.1 How Long We Keep Your Data

• Photos & Analysis Results: Stored on your device until you delete them or uninstall the app. Not permanently stored on our servers.
• Workout Plans & Progress: Stored on your device and synced to iCloud until deleted or account is removed
• iCloud Data: Your synced data (workout plans, progress, settings) is stored in iCloud as long as you have an account. Deleting your account removes this data.
• Social Data: Friends, shared scans, reactions, and activity data are stored in iCloud until you remove friends or delete your account
• Subscription Records: Retained for up to 5 years for accounting and legal compliance
• Analytics Data: Anonymized usage data retained for up to 12 months
• OpenAI Processing: Photos retained by OpenAI for maximum 30 days, then automatically deleted

6.2 How to Delete Your Data

You can delete your data at any time:

• Delete Scans: In the app, go to Profile → Quick Actions → "Clear All Scans" to delete all photos and analysis results from your device
• Delete Workout History: Profile → Quick Actions → "Clear Workout History"
• Remove Friends: Long-press on a friend in the Friends tab to remove them and delete shared data between you
• Sign Out: Profile → Account → Sign Out to disconnect from iCloud sync (local data remains)
• Delete Account: Profile → Account → Delete Account to permanently delete your account and all associated data from iCloud, including your profile, friends, shared scans, and synced progress
• Uninstall App: Removes all locally stored data. For deletion of subscription records on our servers, contact kontakt@bataksolutions.se

7. Your Privacy Rights (GDPR)

If you are located in the European Union, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restriction: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for notifications or analytics at any time

To exercise any of these rights, contact us at kontakt@bataksolutions.se. We will respond within 30 days.

8. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance (GDPR Art. 6(1)(b)): Processing photos and personal data to provide AI analysis and training plans is necessary to fulfill our service to you
• Consent (GDPR Art. 6(1)(a)): You provide explicit consent by uploading photos and entering personal information in the app. You can withdraw consent by deleting your data.
• Legitimate Interests (GDPR Art. 6(1)(f)): Analytics and app improvement based on anonymized usage data
• Legal Obligation (GDPR Art. 6(1)(c)): Retention of subscription records for accounting and tax compliance

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Union:

• United States: OpenAI, RevenueCat, and Superwall process data in the US. These transfers are protected by:
  • Standard Contractual Clauses (SCCs) approved by the EU Commission
  • Service providers' compliance with GDPR-equivalent safeguards
  • Your explicit consent when using the app

We ensure all international transfers comply with GDPR requirements through appropriate safeguards.

10. Children's Privacy

TrueForm AI is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at kontakt@bataksolutions.se and we will delete such data.

11. Notifications & Communications

With your permission, we may send you:

• Workout Reminders: Push notifications at your chosen time to remind you to train
• Progress Updates: Weekly/monthly summaries of your training and scan activity
• Scan Reminders: Notifications after 3 weeks to encourage consistent progress tracking
• Friend Requests: Notifications when someone sends you a friend request
• Friend Accepted: Notifications when someone accepts your friend request
• Nudges: Notifications when a friend sends you a motivational nudge
• Friend Activity: Optional notifications when friends complete workouts

You can disable notifications at any time in the app's Profile → Settings or in your device's iOS Settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or app features. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you through the app or via email (if we have your contact information)
• Obtain new consent if required by law

Your continued use of TrueForm AI after changes constitutes acceptance of the updated policy.

13. Contact Us