Privacy Policy

This policy covers two things. The waiting list, which is open now — that is an email address and nothing else. And the Formerly app, which is not open yet; the second half of this page explains what will happen to your data when it is, so there are no surprises when you get in.

1. Who We Are

Formerly is currently operated by Oliver Cox and Perys Munns, trading as Formerly, based in Bath, United Kingdom.

For any privacy questions, contact: formerlyfitness@gmail.com

2. The Waiting List

What we collect. Your email address. The form you used to join, so we know which page you came from. Your browser's user agent string. The date and time you joined. That is the whole list — we do not ask for your name, and we do not track you around the site.

Why, and our legal basis. Consent. You gave us an email address so we can tell you when Formerly opens, and send the occasional note while we build it. Nothing else is sent to that address, and it is never sold, rented or shared for anyone else's marketing.

How long we keep it. Until you unsubscribe, or 24 months from the day you joined if we still have not opened by then — whichever comes first. After that the address is deleted.

How to get off the list. Every email has an unsubscribe link at the bottom, and one click is enough. We stop immediately. We keep a record that the address unsubscribed, and nothing more, so that we cannot email you again by mistake — ask us and we will erase that too.

Who touches it. Supabase, which hosts the database the list is stored in. Lovable, whose platform runs the site and sends the confirmation email. Both are bound to handle it to UK GDPR standards.

3. The App — When It Opens

None of what follows is happening yet. The app is not open, so there are no accounts, no videos and no analyses. This is what will happen to your data once it is.

a) Account data

• Name, email address, password (hashed)
• Profile information you choose to provide (e.g. fitness goals, experience level)

b) Video and pose data

• Video footage you record of yourself exercising, for the purpose of AI-generated form analysis
• Body movement and pose measurements derived from that video

c) Usage data

• App interactions, session logs, device type, crash reports, and usage analytics

We treat video as sensitive and apply extra safeguards to it, described below.

Our legal basis

• Account data — Purpose: Creating and managing your account — Legal Basis: Performance of a contract
• Video and pose data — Purpose: Providing AI form-check feedback — Legal Basis: Explicit consent
• Usage data — Purpose: Improving the App, fixing bugs — Legal Basis: Legitimate interests

For video specifically, we will ask for your explicit, opt-in consent before you use any video-based feature. You may withdraw this consent at any time via your account settings; this will not affect the lawfulness of processing carried out before withdrawal.

How your video will be processed and stored

• Videos are stored securely in our database infrastructure (Supabase), hosted in the European Economic Area.
• Frames from your video are analysed by Google Gemini, accessed through Lovable's AI gateway, to generate form-correction feedback.
• No person at Formerly routinely views your video; it is processed automatically.
• The feedback you receive is machine-generated and may not always be accurate.
• Retention: your videos are retained for as long as your account remains active. If you delete your account, associated videos are permanently deleted.
• You may delete individual videos at any time from within the App.
• We do not sell, rent, or use your video data to train third-party AI models without separate, explicit consent.

Who we share it with

• Supabase — database and file storage
• Lovable — platform hosting, AI gateway and email sending
• Google — the Gemini model that analyses video frames

Our analytics are self-hosted and set no cookies. All processors are bound by data processing agreements requiring them to protect your data to UK GDPR standards. We do not sell your personal data to third parties. If any processor stores or processes data outside the UK/EEA, we ensure appropriate safeguards are in place (such as the UK's International Data Transfer Addendum or adequacy regulations) before transfer occurs.

See our Terms & Conditions for further detail on the nature and limitations of AI-generated feedback.

4. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to erasure")
• Withdraw consent at any time
• Restrict or object to certain processing
• Data portability

To exercise any of these rights, contact us at formerlyfitness@gmail.com. We will respond within one month as required by law.

If you are unhappy with how we have handled your data, tell us first at the address above. We will acknowledge your complaint within 30 days and tell you what we intend to do about it. If you are still unhappy after that, you can complain to the Information Commissioner's Office.

The Information Commissioner's Office (ICO) can be reached at ico.org.uk.

5. Data Security

We apply appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit and at rest
• Access controls limiting who can view stored video
• Regular review of third-party processor security practices

No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.

6. Children's Data

Formerly is not intended for use by anyone under the age of 18. We do not knowingly collect data from children under this age. If you believe a child has provided us with data, please contact us so we can delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will email waiting-list members about material changes, and once the App is open we will notify you there as well.

8. Contact Us

Questions about this Privacy Policy or your data: Email: formerlyfitness@gmail.com