FormShift
Privacy Policy
1. Introduction
This Privacy Policy explains how FormShift (“FormShift”, “we”, “our”, or “us”) collects, uses, stores, shares, and deletes information when you use the FormShift iOS application and related services.
2. Who We Are
FormShift is an AI-powered body transformation visualization app operated by Mehmet Kumdakcı, an individual developer. It creates illustrative previews of possible physique changes based on photos and information you provide. It is not a medical, nutrition, or fitness coaching service.
Odd Space Projects is a studio/project brand used in connection with FormShift. It is not a registered company or legal entity. No registered company or sole proprietorship currently operates FormShift.
3. Eligibility
FormShift is intended only for users aged 18 years or older. Do not use the app if you are under 18.
4. Information We Collect
Depending on how you use FormShift, we may process:
4.1 Account information
- Sign in with Apple identifiers needed to create and maintain your account (for example, an Apple identity token processed to establish a session).
- A session credential stored on your device so you can stay signed in.
We do not offer Google sign-in or email/password accounts in the current iOS app.
4.2 Profile and transformation inputs
Information you enter to generate a preview, such as age, sex, height, weight, goal, and timeline. These values are sent with a generation request so the service can produce your result.
4.3 Photos
- On your device: Front and side photos you capture or select may be stored locally in the app while you complete onboarding and generation.
- Sent to our servers: For a paid generation, the front photo is transmitted to our servers so we can produce your result. In the current product, the side photo is used in the onboarding experience on your device and is not uploaded as part of the generation API request.
- Not retained as originals on our servers: We do not keep a durable server-side archive of your original input photos after processing. Originals used for a request are handled in memory for that request and for delivery to our AI image provider (see Section 7).
4.4 Generated results
For a completed paid generation, our servers may temporarily store:
- the generated image, and
- related structured content (for example physique analysis text, plan/journey content associated with that generation),
so you can recover a result if the app is interrupted (see Section 8).
4.5 Credits and purchases
- Credit balance and purchase records needed to grant consumable transformation credits and prevent duplicate grants.
- Purchase-related identifiers from Apple / RevenueCat (for example store transaction identifiers) needed to confirm a purchase.
4.6 Technical information
Limited technical data needed to operate the service (for example API requests, error responses, and security-related logs). We do not currently include third-party product analytics or crash-reporting SDKs (such as Firebase Analytics or Firebase Crashlytics) in the iOS app.
4.7 On-device history
The app may keep a local History of recent transformations (including images and related content) on your device so you can revisit them. This History is stored on the device and is separate from the temporary server recovery window described below.
5. How We Use Information
We use the information above to:
- create and authenticate your account (Sign in with Apple);
- provide AI transformation previews and related on-screen analysis/plan content;
- manage consumable transformation credits and confirm in-app purchases;
- recover a recent generation if the app is closed or the network fails during processing;
- operate, secure, and troubleshoot the service;
- respond to support requests; and
- comply with law and enforce our Terms.
We do not sell your personal information.
6. AI Processing and Limitations
Uploaded front photographs and your profile inputs are processed to generate an illustrative future-physique preview and related text content.
Important:
- Results are estimates for visualization only. They are not guarantees of future appearance, health outcomes, or training results.
- Results are not medical, diagnostic, nutritional, or professional fitness advice.
- AI outputs may contain inaccuracies or visual artifacts.
We do not use your photos to train FormShift’s own models. Photos are processed by a third-party AI provider to fulfill your request (see Section 7). That provider’s handling of data is governed by its own terms and policies.
7. Third-Party Processors
We use service providers to operate FormShift. Categories relevant to the current iOS product include:
| Provider / category | Role |
|---|---|
| Apple | Sign in with Apple; App Store billing for in-app purchases |
| RevenueCat | In-app purchase verification and related purchase infrastructure |
| Google (Gemini / generative AI APIs) | Generation of transformation images and related AI content from request inputs |
| Cloud hosting and database | Hosting the FormShift API and storing account, credit, and temporary generation-recovery data |
These providers process data only as needed to provide their services to us. We do not control Apple’s or Google’s independent platforms beyond our integration with them.
8. Data Retention
Retention depends on where data lives:
8.1 Account data
Account records are retained while your account remains active. If you delete your account, we anonymize the account record and remove associated generation recovery data as described in Section 9. Certain purchase/credit ledger records may be retained as needed for accounting, fraud prevention, and purchase idempotency.
8.2 Original photos
- On device: Remain until you remove them via normal app use, clear app data, uninstall the app, or delete your account (which clears local app data the deletion flow controls).
- On our servers: We do not maintain a durable server-side store of original input photos. Photos are transmitted for processing and are not kept as a long-term photo archive.
8.3 Server-side generation recovery (24 hours)
After a successful paid generation, the generated image and associated result payload may be stored on our servers for up to 24 hours so the app can recover the result (for example after an interruption). After that window, the server-side recovery record is treated as expired and is eligible for deletion. This is not a 30-day photo library on our servers.
8.4 On-device History
Local History on your device may keep recent results longer than 24 hours, subject to device storage and app limits (the app caps how many History items it keeps). Deleting History items, deleting your account, or removing the app removes that local copy according to how iOS and the app handle local files.
8.5 Clarifications
We do not operate a verified 30-day automatic purge of all photos/images as a server photo library, and we do not use third-party product analytics or Crashlytics retention in the current iOS app.
9. Account Deletion
You may delete your account from within the app (account / sign-in flows that expose permanent account deletion).
When deletion succeeds, FormShift:
- removes server-side generation transactions and temporary generation results associated with your account;
- anonymizes your user account record so it can no longer be used to sign in as you;
- signs you out on the device, clears local session data, local History controlled by the app, pending local generation data, and related local caches; and
- ends the app’s RevenueCat customer session on the device (logout). We do not claim that every copy held independently by Apple, RevenueCat, or our AI provider is erased beyond what those providers support through our integrations.
Some purchase/credit ledger entries may remain for legitimate business and security purposes (for example to prevent replay of the same store transaction).
10. Your Rights and Choices
Subject to applicable law, you may be able to:
- access or request information about data we hold;
- correct inaccurate profile information you control in the app;
- delete your account and associated personal data as described above;
- withdraw consent where processing is consent-based by stopping use and deleting your account.
To make a request, contact us using the address in Section 15. We may need to verify your identity before fulfilling certain requests.
11. Security
We use industry-standard protections appropriate to the service, including transmitting data to our production API over HTTPS. Access to production systems is restricted to authorized operators.
We do not make specific certification claims (for example SOC 2). Hosting providers may apply additional protections to infrastructure they operate; those details are not independently enumerated here.
12. International Processing
Your information may be processed in countries where we or our providers operate. Where required, we rely on appropriate contractual or legal mechanisms for such transfers.
13. Children’s Privacy
FormShift is not directed to children. The service is for adults 18+. We do not knowingly collect personal information from children under 18. If you believe a minor has used the app, contact us so we can take appropriate steps.
14. Changes
We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date. Continued use after changes become effective means you accept the updated Policy, except where applicable law requires otherwise.
15. Contact
Operator: Mehmet Kumdakcı (individual developer)
Privacy and support:
support@formshiftapp.com
This is the official contact mailbox for privacy questions and user support.