Your photos are analysed on your device and never stored by Forma. Your account keeps numbers and notes, not pictures. No advertising or third-party analytics trackers; we only count which link brought visitors, without identifying them. You can export or delete your data in Settings.
Who is responsible for your data
Lari Ventures, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, runs Forma and is responsible for the personal data described here. Privacy questions and requests: ali.lari@auditro.co.
Photos stay on your device
Forma decodes photos, checks photo conditions, detects landmarks, calculates measurements and runs its AI face estimate in your browser. Those steps do not send your photos to us or to an analysis provider. In-session photos and landmark coordinates clear when the tab closes or reloads. We never add photos to your account history, and support cannot see them.
Your local report still works. No photos are sent for cloud assessment until the service is configured and you choose to send them.
Optional cloud visual guidance
Only if you opt in for a report, Forma sends the selected front and optional side photo to OpenAI through our server. OpenAI returns structured observations about visible hair, facial hair, glasses and skin appearance. We save the resulting text with that report, not the photos. If you decline or the provider fails, your local report remains available.
Our request uses store: false, which avoids the Responses API's default application-state storage. Under OpenAI's API data controls, API data is not used to train models by default. Abuse-monitoring logs may contain customer content and are usually retained for up to 30 days, longer where law or service protection requires it. Image inputs are also scanned for child-safety material, and flagged images may be kept for manual review. This is not a zero-retention promise.
What your account stores
- Sign-in details: your email address and name, the sign-in method you use (Google or email and password), active sessions and, for email sign-in, a securely hashed password. We never see your Google password.
- Your records: numerical report summaries, photo-check numbers, plans, check-in notes, experiment decisions and saved cloud-guidance text. No photos.
- Usage: report reservations and your monthly allowance.
- Where you came from: the link label or website that first brought you to Forma in the last 30 days (for example a Reddit ad or a creator's link), saved once when you sign in and added to checkout. We use it only to learn which channels work.
- Security signals: keyed hashes of a random device ID and of your connection IP, stored with the account and report time. Signals older than 30 days are ignored and pruned. Several accounts on one device or network may trigger a Cloudflare Turnstile check; a shared IP never blocks anyone on its own.
- Billing: your Stripe customer and subscription IDs and payment status. Never card numbers.
We use this data only to run your account, provide the features you use, take payment, prevent abuse, answer support requests and learn which channels bring people to Forma. We do not sell it or use it for advertising.
Service providers
These companies process data for us, only to provide their part of Forma:
- Cloudflare
- Hosting, the account database and Turnstile security checks. Privacy policy
- Stripe
- Checkout, payments, invoices and the subscription portal. Privacy policy
- Sign-in, if you choose Google. Google shares your name, email address, profile picture and account ID with us. Privacy policy
- Resend
- Account emails, such as email verification and password reset. Privacy policy
- OpenAI
- Cloud visual guidance, only for reports where you opt in. Privacy policy
Cookies and browser storage
Forma uses only the cookies needed to keep you signed in and to protect sign-in and forms. There are no analytics, advertising or tracking cookies. Your browser's local storage keeps your workspace, streak, a random device ID and, for up to 30 days, the label of the link that first brought you here; clearing Forma's site data removes them. Forma counts visits, free-tool uses, added photos, completed reports and checkout starts per day and per link label, with no visitor ID, IP address or browser details. Your browser's Global Privacy Control signal turns this off, or use the button below. Stripe's checkout and portal pages and Cloudflare's security checks set their own cookies under their own policies. External research links have their own privacy practices.
How long we keep data
We keep your account records until you delete them in Settings or close your account. Stripe keeps payment and invoice records that the law requires, and deleting your Forma data does not remove them. Security signals older than 30 days are pruned.
Your rights and choices
You can see, export, correct and delete your data. Depending on where you live, you may also have the right to object to or restrict some processing, to data portability and to complain to a data-protection authority.
- Export: Settings & privacy downloads everything Forma holds for your account as JSON, including history, guidance results, report usage, security-signal hashes, your source label, billing records and a write-protection token. No photos, because we have none.
- Delete one report: removes it and its saved guidance.
- Delete history: removes saved history and guidance results but keeps usage, security signals and billing records.
- Delete account data: removes history, usage, security-signal hashes, the saved source label and billing links, and clears this browser's workspace. A pseudonymous write-protection token remains so older tabs cannot restore deleted records; it expires after 30 days without a signed-in visit. Reload other Forma tabs before using them again.
- Close your account: email ali.lari@auditro.co from the account's address and we will delete the account and its sign-in.
For a billing account, deletion first checks Stripe for an open checkout, a subscription that has not ended, or an unsettled payment and stops if it finds one. Once they end, it deletes the Stripe customer and Forma's billing links. Stripe keeps deleted customers retrievable for payment history, so historical transactions at Stripe are not erased. Deletion does not remove files you downloaded or ordinary service logs.
Children
Forma is for adults 18 and over. Do not create an account if you are under 18, and never upload a photo of a child. If we learn that an account belongs to someone under 18, we will delete it.
International transfers
Our providers may process data in the United States and other countries where they operate. Those countries may have different data-protection laws from yours. We use providers that commit to protecting the data they process for us.
Security
Forma is served only over HTTPS, passwords are stored as hashes, and account data is scoped to your signed-in account. No system is perfectly secure; tell us at ali.lari@auditro.co if you notice a problem.
Changes to this notice
We will post updates here with a new date, and tell you by email or in the app before a material change takes effect.
Open Settings