Effective date: September 20, 2026
Cartwheel Form LLC ("we," "us," "our") operates the Form mobile application ("Form"). This policy describes what data we collect, how we use it, and your rights regarding that data. Cartwheel Form LLC is the data controller responsible for your personal information.
When you create an account, we collect your name, email address, and a unique user ID. You may sign in with email and password, Apple Sign-In, or Google Sign-In. Authentication is handled by Firebase Authentication (Google Cloud).
During onboarding and coaching conversations, we collect fitness-related information to personalize your training plan:
With your explicit permission, Form reads the following data from Apple Health:
Form writes completed workouts back to Apple Health so your fitness data stays in one place.
HealthKit data is used solely to calculate readiness scores and personalize the training plan and coaching responses your AI coach generates for you. HealthKit data is never sold, shared with advertisers, used for tracking, or used to train AI models. HealthKit integration is optional.
To generate coaching responses and weekly training plans personalized to your recovery state, summarized HealthKit context (for example, the previous night's sleep duration, recent HRV trend, resting heart rate, and recent activity load) is sent to Anthropic's Claude API as part of the coaching prompt. Anthropic processes this data solely to return a response and does not retain it for training or any other purpose. See Third-Party Services below for details. If you do not enable HealthKit, no health data leaves your device.
We store your workout history including exercises performed, sets, reps, weights, duration, difficulty ratings, personal records, streaks, and total volume. This data informs AI coaching and progress tracking.
Training With Friends lets you connect with other Form users you choose, and train together.
Once you and someone are friends, they can see your name. If your "Share Activity with Friends" setting is on, friends also see each workout you finish: how long it took, how far you went, your average pace, and any achievement you earn. Turn this setting off in Settings at any time. Friends will then stop seeing your new workouts, and a friend cannot start a shared session with you while it is off.
If you join a shared session with friends, everyone in that session can see your finish state, your duration, your distance, your average pace, and how closely you stuck to the plan. In a harder, faster-paced session, they can also see your pace at every kilometre.
We never share your heart rate, other health data, or your GPS route with friends. Those stay between you and your coach.
If you start an outdoor run, Form collects precise location (GPS) data while the run is active in order to record your route, distance, pace, and split times. Location is collected only during an active run-tracking session and with your permission; you can decline location access and still use the rest of the app, and indoor/treadmill runs do not use GPS. Recorded run routes and metrics are stored under your account and used to display your run, track progress, and inform AI coaching. Location data is never sold, shared with advertisers, or used for tracking across other apps or websites.
You may optionally upload a profile avatar photo, which is stored in Firebase Storage and linked to your account.
We store a Firebase Cloud Messaging (FCM) device token to deliver push notifications for coaching check-ins and plan updates. We also store your timezone (IANA identifier) for notification scheduling.
If you choose to bring in a chat you previously had with another AI assistant (such as ChatGPT, Claude, or Gemini) during onboarding or from Settings, Form stores the text you paste so your coach can reference it when designing your future training plans. We treat imported conversations the same way we treat your other Form chat data:
If you don't import a conversation, none of this applies — the feature is fully opt-in and the planning-context question on the consultation chat can be answered without naming any AI tool.
Form has two optional voice features: Dictation and Live Voice. Both use your microphone, and both send audio to OpenAI. Neither runs until you tap the microphone button in chat, and iOS asks for microphone permission the first time. Your agreement to this policy, which you accept when you create your Form account, is what permits Form to send that audio to OpenAI. You can turn microphone access off at any time in the iOS Settings app, which stops both features.
If you choose Dictation, Form records a short audio clip and sends it to OpenAI to convert your speech into text. Form deletes the temporary recording from your device after the cloud or on-device transcription attempt. If OpenAI transcription is unavailable, Form may use Apple's on-device speech recognition when your device supports it. Tapping Stop leaves the dictated text in the message field for you to review. Tapping Send while recording asks Form to transcribe and submit that text to your coach as soon as it is ready, provided you are still signed in to the same account and that chat can still accept a message.
If you choose Live Voice, Form streams your microphone audio to OpenAI and may send recent chat context and the coaching responses produced by Form's coaching model so OpenAI can conduct the spoken conversation. OpenAI returns audio and transcript text. Form does not store raw Live Voice audio. A protected text-only recovery journal is excluded from device backups and is eligible for transcript recovery for 24 hours. It is removed after successful recovery, on sign-out or account deletion, or during the next journal cleanup after it becomes stale. When the session ends, the actual Live transcript is stored in your Form chat under your account. Form's own coaching model writes what the coach says; OpenAI speaks it and handles the listening. OpenAI does not make coaching decisions for you.
OpenAI states that API data is not used to train its models by default unless the API customer opts in. OpenAI currently lists its audio-transcription endpoint with no abuse-monitoring or application-state retention. For Live sessions, OpenAI may retain content in abuse-monitoring logs for up to 30 days by default, and may retain it longer when required by law or reasonably necessary to protect its services or third parties. These provider practices may change; see OpenAI's data controls documentation and privacy policy for current details.
To keep Form stable and improve it, we collect diagnostic and usage information such as crash reports, performance metrics (for example, launch times and energy use), and product-interaction events (which features are used and how). This information is collected through Firebase, is not linked to your identity, and is never used for advertising. It is used only to find and fix bugs, monitor reliability, and decide what to improve.
All collected data is used for app functionality:
We do not use your data for advertising, marketing to third parties, or any purpose beyond providing and improving the app's core functionality.
We do not track you across other apps or websites. There are no advertising SDKs, no tracking domains, and no advertising identifiers in the app. NSPrivacyTracking is set to false.
Your data is encrypted in transit using TLS and encrypted at rest by Google Cloud (Firebase). API communication with Anthropic uses certificate pinning. The app does not use non-exempt encryption beyond standard HTTPS/TLS.
Your data is retained while your account is active. Temporary Dictation audio is deleted after the transcription attempt, and Form does not store raw Live Voice audio. The text-only Live recovery journal is no longer recoverable after 24 hours and is removed during the next journal cleanup; completed Live transcripts are retained as part of your chat history. You may request deletion of your account and all associated data at any time by contacting us at the email below. Upon deletion, all personal data is permanently removed from our systems within 30 days.
Form's friends and shared-session features connect you with people you choose to train with. To keep that safe, we collect and process a small amount of data tied to moderation:
For our community guidelines and how to report a concern, see the Support page.
If you are in the European Economic Area or United Kingdom, you have the right to:
To exercise these rights, contact us at the email below.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the following rights with respect to your personal information:
To exercise any of these rights, contact us at form@d-jt.com. We will respond within 45 days as required by CCPA. We may need to verify your identity before fulfilling a request.
Form does not sell your personal information, and Form does not share your personal information for cross-context behavioral advertising. There is nothing to opt out of because the underlying activity does not occur. No advertising SDKs are present in the app, no advertising identifiers are collected, and no data is transmitted to third-party advertising networks or data brokers.
The third-party services listed in section 3 (Firebase, Anthropic, ElevenLabs, RevenueCat, Strava, WHOOP) act as data processors on Form's behalf under contract — they process data only to provide their stated service and may not sell or use it for their own commercial purposes.
Form is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this privacy policy from time to time. Material changes will be communicated through the app or via email. Continued use of the app after changes constitutes acceptance.
For questions about this privacy policy or to exercise your data rights, contact us at:
Cartwheel Form LLC
form@d-jt.com