Privacy Policy
This policy explains what information the StokeForm app (the "app") and this website (stokeform.com) collect, why, who helps us handle it, and the choices you have. "StokeForm", "we" and "us" mean the people who run the app. If you have a question, write to support@stokeform.com.
In short: we ask for an email address and a name to create your account. Your workouts, food, body measurements and health details are stored on your phone and are not uploaded. We do not sell your information, show ads or track you across other sites.
1. What we collect
| Information | Why | Where it is kept |
|---|---|---|
| Your email address and name | To create and secure your account, and to send confirmation and password reset emails. | Our server database. |
| A password, if you sign up with email | To sign you in. | Our server database, only as a salted hash. We cannot read your password. |
| Google sign-in details, if you use Google | To sign you in without a password. See section 3. | Our server database. |
| Sign-in sessions | To keep you signed in and to protect your account. A session records when it was created and when it expires, and the IP address and device type it was created from. | Our server database. The sign-in token on your phone is kept in the phone's secure storage. |
| Your fitness and health details: date of birth, sex, height, weight, goals, workouts, food and calorie logs, weight and body measurements, InBody records, check-ins and your name and photo in the app | To build your plan and targets and to show your history and progress. | On your phone only. We do not receive them. The app does not upload or sync them. |
| An InBody report image, only if you choose to read a report | To read the values on the report so you can check them and save them. | Sent to our server and on to OpenAI to be read, then returned to the app. We do not save the image or the values it contains, and we do not write them to our logs. We ask OpenAI not to store the request. |
| Technical information: request time, address of the page asked for, result, and IP address | To run the service, prevent abuse (for example by limiting repeated sign-in attempts) and fix faults. | Standard logs at our hosting provider (Google Cloud), and in memory for rate limiting. |
This website does not use cookies, analytics or advertising. Its fonts are served from the site itself.
Exercise photos. When you ask to see an exercise demonstration, the photos are loaded from the jsDelivr content network, which receives your IP address and the request. Nothing is loaded until you ask.
2. How we use it
- To provide the app: create your account, sign you in and keep it secure.
- To email you about your account (confirming your address, resetting a password). We do not send marketing email.
- To answer your messages and requests.
- To protect the service and fix problems.
- To meet legal obligations.
We do not sell or rent your information, use it for advertising, or build profiles about you.
3. Signing in with Google
If you choose "Continue with Google", Google tells us your name, your email address, whether Google has verified that address, and an identifier for your Google account. Google also provides a link to your profile picture, which we do not display or use. We use this only to create your account and sign you in. We never receive your Google password and we do not access your Google contacts, files or other data.
StokeForm's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Who handles information for us
We use these providers to run the service. Each handles information only to provide its service to us.
- Google Cloud hosts our server (in Belgium, europe-west1).
- Neon hosts our database.
- Resend sends our account emails, so it receives your email address and the message.
- Google provides Google sign-in, if you use it.
- OpenAI reads InBody report images, only if you choose that feature.
- jsDelivr serves exercise photos, only when you ask to see them.
We may also disclose information if the law requires it or to protect people's safety or our rights. If we are ever sold or merged, we will tell you before your information becomes subject to a different policy.
These providers may process information in countries other than your own. We choose providers that protect it appropriately.
5. How long we keep it
- Account information is kept while your account exists. When you ask us to delete your account, we delete it, with its sessions, within 30 days. Copies in routine backups are removed as the backups expire.
- Technical logs are kept for a limited time and then removed.
- Information stored on your phone stays there until you delete it in the app or remove the app. Signing out does not delete it.
6. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, and to object to or limit how it is used. To use any of these rights, or to delete your account, email support@stokeform.com from the address on the account so that we can confirm it is you. You can also complain to your local data protection authority.
Because your fitness records are on your phone, you can see, edit and delete them in the app at any time.
7. Security
Information sent between the app and our server is encrypted in transit. Passwords are stored only as salted hashes, and the sign-in token on your phone is kept in secure storage. Your fitness records are kept in the app's private storage on your phone, so please protect your phone with a screen lock. No system is completely secure, and we cannot guarantee absolute security.
8. Children
StokeForm is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a child has created an account, email us and we will delete it.
9. If this changes
If we change what we collect, for example by adding backup or sync of your fitness data, we will update this policy first and tell you in the app before the change applies to you. The date at the top shows when it was last updated.
10. Contact
Questions about this policy or your information: support@stokeform.com.