Privacy Policy

Effective date: June 30, 2026

This Privacy Policy explains how the ApexForm mobile application (the "App") collects, uses and protects your personal data. ApexForm treats privacy as a product principle: it is designed offline-first, and most of your data stays only on your device.

1. Data Controller and Contact

The App is provided by the ApexForm developer. For any privacy question, request, or data deletion request: mehmetefeaytas@acmgedik.com

2. Data We Collect

ApexForm processes the following data only when you use the relevant feature:

Workout data (exercises, sets/reps/weight, sessions, routines, notes): By default stored only in the local database (SQLite) on your device.
Account information (only if you create an account): email address, display name, country and year of birth. Used for cloud sync and friends/ranking features.
Health and activity data (only if you grant Apple Health / Health Connect permission): heart rate, workout and activity records. Processed on your device and not exported without your explicit consent.
Body measurements and progress photos (if you enter them): stored on your device.
Purchase information: If you buy a Premium subscription, the transaction is handled through the App Store; subscription status is verified via RevenueCat. We do not access or store your credit card details.
Advertising data: The free version shows non-personalized ads via Google AdMob. We do not request ad tracking (IDFA) permission.

3. How We Use Data

To record and visualize your workouts and generate on-device progression suggestions.
To sync your data across your devices if you have an account.
To verify and manage your Premium subscription.
To show non-personalized ads in the free version to fund the app.

We do not sell your data and do not share it with third parties for ad profiling.

4. Data Retention and Processing Location

Your workout data is primarily stored on your device. If you create an account, synced data is stored on our secure cloud infrastructure (Supabase) with row-level access control so that only you can access it.

5. Third-Party Services

Apple (App Store purchases, HealthKit)
Google AdMob (non-personalized ads)
RevenueCat (subscription verification)
Supabase (optional account and sync)

Each service is subject to its own privacy policy.

6. Your Rights

Under GDPR and KVKK you have the right to access, correct, delete and restrict the processing of your data. You can remove all data on your device by deleting the app. To delete your account data, contact us at the email above.

7. Children's Privacy

ApexForm is not directed at children under 13, and we do not knowingly collect data from this age group.

8. Changes

We may update this policy from time to time. Significant changes are published on this page and the effective date is updated.

This text is for general information only and does not constitute legal advice. We recommend having it reviewed by a legal advisor before publication.