Privacy Policy

Forva ("we", "us", "our") is an AI-guided nutrition and training application. This policy covers both the full Forva app (forva.health) and Forva Lite (lite.forva.health) — a streamlined version focused exclusively on daily protein tracking. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

Full Forva app (forva.health):

• Account information — email address and password (hashed) for authentication.
• Health data — weight, body measurements, nutrition logs, workout data, GLP-1 medication information, mood and energy ratings, and injury tracking. This data is provided voluntarily through daily check-ins and session feedback.
• Profile information — goals, scheduling preferences, dietary preferences, and coaching insights.
• Usage data — interaction with AI features (message content, plan generation) to provide the coaching service.
• Device information — push notification tokens for delivering reminders (optional, user-controlled).

Forva Lite (lite.forva.health): Lite collects a narrower subset.

• Account information — Lite supports anonymous use (no email needed to start). An anonymous Supabase user id is generated on first launch and stored in your device's local storage. Once you sign up, your email and a hashed password replace the anonymous account; the profile and log data carry over.
• Basic profile — age, height, current weight, activity level, and protein goal. Used only to compute your daily protein target.
• Daily logs — the foods you log via chat, the protein and calorie totals computed from them.
• Chat content — messages exchanged with the protein coach, including optional meal photos.

Lite does not collect: workout data, injury tracking, GLP-1 medication info, mood / energy / sleep ratings, location, or device identifiers beyond what your browser sends.

• To provide personalized AI coaching — generating workout plans, nutrition suggestions, and adapting recommendations based on your progress.
• To send push notifications for session reminders, daily check-in prompts, and inactivity nudges (all user-toggleable).
• To track aggregate AI usage for service monitoring.

All sensitive health data is encrypted at rest using AES-256-GCM field-level encryption. This includes weight, medications, health conditions, mood, energy levels, coaching insights, injury data, and chat messages. Encryption keys are stored separately from the database.

All data is transmitted over HTTPS. We use Supabase with Row Level Security (RLS) to ensure users can only access their own data.

• Supabase — database and authentication provider.
• Anthropic (Claude API) — AI model provider for coaching features. Conversation data is sent to Anthropic for processing but is not used to train their models.
• Apple Push Notification service / Firebase Cloud Messaging — for delivering push notifications on iOS and Android.
• Meta Pixel — on our public landing page (forva.health) only, we use the Meta (Facebook) Pixel to measure the performance of our advertising. It may set cookies and share your IP address and page-view activity with Meta. It is not present inside the app, and no health data, account data, or coaching content is ever sent to Meta.

We do not sell or rent your personal data. We do not share your health data, account data, or coaching content with any third party for advertising or marketing. The only advertising-related sharing is the Meta Pixel on our public landing page, described above.

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us.

• Access — request a copy of your data.
• Correction — update inaccurate data via the app.
• Deletion — request complete deletion of your account and data.
• Portability — export your data (iCal feed for calendar events is already available).

Forva is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

We may update this policy from time to time. Significant changes will be communicated via the app. Continued use after changes constitutes acceptance.

For privacy questions or data requests, contact us at contact@forva.health.