Privacy Policy

About this policy

This policy explains how Reforma handles data, why it is used, which providers receive it and the choices available to you.

Data on your device

Reforma stores onboarding preferences, saved and planned workouts, favourites, workout history, streaks, ritual progress, notification preferences and settings on your device and protected App Group storage. An account is not required.

Data used to provide the service

When you import a public TikTok, Instagram or YouTube link, Reforma may process its URL, public caption, metadata, thumbnail, subtitles, frames and OCR text to generate the requested workout. Personalised-workout answers and generated plans are processed when you use that feature. Apple App Attest proofs, transaction data and technical identifiers are processed to secure paid backend access.

Explore sharing

Imports are not published by default. After the onboarding demo, Reforma asks whether future generated cards may be shared to Explore. If you have not already chosen, this question appears on your first import instead. You can choose “Keep Private” and change the preference later in Explore & Sharing settings. The demo itself is not published. A shared card can include its public source thumbnail, title, exercises, repetitions, timings and coaching cues, but not your identity. You can disable future sharing, hide cards or report content in Explore.

Providers

Reforma uses Apple for distribution, purchases, notifications and App Attest; Cloudflare for protected API delivery, caching and security; ScrapeCreators for public social-video information; OpenRouter and DeepSeek for workout generation; and Superwall for paywall and subscription presentation. TikTok, Instagram and YouTube host links you choose to import. Reforma does not sell personal data or use it for third-party advertising or cross-app tracking.

Purposes, retention and transfers

Data is used to deliver requested features, personalise workouts, maintain subscriptions, prevent abuse and troubleshoot failures. Device data remains until removed, reset or the app is uninstalled. Processing jobs and security records are retained only as reasonably necessary; cached workouts expire or are removed when no longer needed. Providers may process data outside your country using applicable safeguards.

Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, objection or portability, and may complain to your data-protection authority. Optional notification and Explore-sharing consent can be withdrawn in Settings. Reforma is not directed to children below the applicable digital-consent age without guardian authorisation.

Security and changes

Reforma uses encrypted transport, server-side credentials, verified StoreKit transactions and Apple App Attest. No system is absolutely secure. Material policy changes will be communicated appropriately and this date will be updated.