Datspire.
← dat.form policies

dat.form Privacy Policy

Effective date: 31 October 2026

1. Scope and operator

This Privacy Policy applies to the dat.form mobile application (the App). The App is operated by Datspire, a sole trader business operating in Queensland, Australia (Datspire, we, us or our).

This Policy describes the information handled by the current version of the App and the choices available to you. Your records are kept on your device, and leave it only if you choose to export or share them yourself, as described in section 5. The only requests the App makes to a Datspire website are for the policy-update check described in section 8, and they carry no part of your record. The App on Google Play also shows advertisements from Google AdMob and offers a purchase through Google Play, as described in section 7. Neither receives any part of your record.

2. Information handled by the App

The App may store information that you choose to enter or create, including:

  • your display name, anything you write about yourself, sex, height and date of birth;
  • a profile picture, if you choose to add one;
  • weight, waist and the other body measurements you choose to track, across thirteen measurement sites;
  • body-fat readings you enter, together with how each one was obtained;
  • check-in notes, progress photographs and the analysis copies kept alongside them;
  • goals you set, and the history of goals you have closed or replaced;
  • preferences and accessibility settings, including your theme, your coach style, which measurements you track, your default graph and your reminder schedule;
  • estimates, trends and other results calculated from your entries; and
  • limited diagnostic records created on your device with sensitive values removed.

For a new profile, you must enter a complete date of birth (day, month and year) to finish onboarding. The App rejects future dates and dates that are implausibly old. If your profile contains only a birth year, the App will require a complete date of birth the next time you edit and save your profile.

A starting weight is optional. If you do not provide one it remains missing; the App does not substitute a value for it. Estimates and planning figures that depend on weight are withheld until the readings they need exist.

This information is stored locally on your device. The current App does not create a Datspire account or send this information to a Datspire server.

3. How information is used

The App processes information on your device to:

  • record and display check-ins;
  • calculate estimates and trends, keeping a body-fat reading you entered identified separately from one the App has estimated;
  • calculate your age for age-based estimates and goal calculations;
  • suggest goal target dates from your own recorded weight and waist history;
  • support goals, preferences and accessibility settings;
  • provide camera and photo functions that you request; and
  • diagnose local App errors without retaining the sensitive values you entered.

If you turn on check-in reminders, the App schedules local notifications on your device for the days and time you choose. The chosen time is a local clock time and follows your device timezone. The notification text is generic: it contains no measurement, photograph or goal value. Nothing about a reminder is sent to Datspire, and whether one appears depends on the notification permission and settings in your operating system.

The Support screen can prepare an email for you to review and send from your own email app. You write the message, and you decide whether to include your device platform and operating-system version. The App does not attach your measurements, photographs or notes, and nothing is sent until you send it yourself.

4. Camera and photographs

The App may request access to your camera or photo library when you use a photo feature: taking or choosing progress photographs, or taking or choosing a profile picture. Camera-framing assistance and photo processing in the current App occur on your device. You decide whether to capture, select, retain or delete a photograph.

An image you capture or select is copied into the App's private storage on your device. Removing the App's copy does not remove the original from your device photo library, and does not affect any copy held anywhere else.

Guided progress-photo capture uses a pose and framing check that runs entirely on your device, so that photographs taken at different check-ins can be compared in the same frame. Photographs are not used to estimate your body measurements, and neither photographs nor tape readings are used to assert that you have gained or lost fat or muscle.

If you decline camera permission, the pose guide and the option to upload an individual photograph remain available. Photo-library permission is requested only if you choose to upload.

You may decline camera or photo-library permission, but the related feature will not operate. Permissions can be changed through your device settings.

5. Backup, export, restore and sharing

The App can create a backup archive of your record when you ask it to. You choose a passphrase, and the archive is encrypted with that passphrase on your device. The archive contains the profile data and profile picture the format supports, your preferences and tracking choices, your goals and goal history, your check-ins with their measurements, your progress photographs and the analysis copies retained with them.

Datspire cannot recover a forgotten passphrase. There is no recovery key, no reset and no copy of the passphrase held by anyone else. An archive whose passphrase has been lost cannot be opened.

The App writes the archive to a temporary location on your device and hands it to your operating system share sheet. You choose where it goes, whether that is another application, a cloud drive, a computer or somewhere else. The App does not upload the archive, is not told where you sent it, and keeps no record of it.

On Android, Google's cloud backup of app data is switched off for the App, so your record is not included in it. Some Android phones may still copy app data directly to a new phone when you set one up. A backup archive exists only because you asked the App to create one.

Restoring reads an archive you select and asks for its passphrase. The App validates the archive and stages its media before the record on your device is replaced, and the replacement happens only once you confirm it. Archives created by earlier versions of the format are accepted; an older archive restores only what that version was able to record.

If you separately share content using a feature available in the App, you choose the receiving application, service or person. The recipient's privacy practices apply to the separately shared copy.

A backup archive, like any separately shared copy, exists outside the App. Deleting information from the App, including by using More > Settings > Data & privacy > Erase app data, does not delete a backup or copy already saved or shared elsewhere.

The App keeps a short record of errors on your device, without your measurements, photographs or profile details. You can read these records, share them yourself through your operating system share sheet, or clear them, in More > Settings > Data & privacy > Crash reports. The App never sends them anywhere on its own.

6. Storage, retention, access, correction and deletion

Information remains on your device until you delete it in the App or use More > Settings > Data & privacy > Erase app data.

Once a goal has been closed or replaced it becomes part of your goal history, which the App does not allow you to edit or delete individually. A history entry keeps the boundary readings that were available at the time, the reason the goal closed, the coach style then in use and the version of the calculation applied. Erase app data removes goal history along with everything else.

You can view and correct information stored locally by opening the relevant profile, check-in, goal, preference or setting in the App. Datspire does not hold an account-based or server copy of information stored by the current App and therefore cannot retrieve, correct or delete such a copy for you.

If a future version stores information remotely, the applicable access, correction, retention and deletion arrangements will be disclosed before that feature is enabled.

7. Advertising, purchases and services not used

The App on Google Play shows advertisements from Google AdMob, an advertising service provided by Google. A banner advertisement can appear on the Home, History and Trends screens. A full-screen advertisement can appear after you save a new check-in. No full-screen advertisement is shown in the first three days after the App is first opened on your device, or within five minutes of the previous one.

The App asks for non-personalised advertisements only. It sends no part of your record to Google for advertising: no measurements, photographs, notes, goals, name, sex or date of birth, and no keywords or other targeting.

Google's advertising software in the App collects the following information and shares it with Google, for advertising, analytics and fraud prevention:

  • your device's IP address, which may be used to estimate the general location of your device;
  • how you interact with the App, such as app launches and taps;
  • diagnostic information, such as launch time and the performance of the App and of Google's software; and
  • device and account identifiers, including the Android advertising ID and the app set ID.

Google states that this information is encrypted in transit. How Google uses information from apps that use its advertising services is described in Google's Privacy & Terms, on the page titled "How Google uses information from sites or apps that use our services".

Datspire's own code in the App does not read the advertising ID or the app set ID. You can reset or delete the advertising ID in your device's settings.

Where Google's rules require it, including in the European Economic Area, the United Kingdom and Switzerland, Google shows its consent form before advertising starts. If Google's consent check does not allow advertisements to be requested, the App requests none. Where Google offers the option, and while the App shows advertisements, More > Settings > Data & privacy > Ads and privacy shows a Review ad choices button that opens Google's form again.

The App on Google Play offers one optional purchase, Remove ads, a one-time purchase made through Google Play. Google Play takes the payment. Datspire receives a record of the order through Google Play's developer console. The record includes the order number, the date and status of the order, the billing address, the product, the price, the tax and the total.

When the App starts, and each time you return to it, it asks Google Play on your device whether your Google Play account owns Remove ads. It checks Google Play's signature on the answer on your device. Nothing about the purchase is sent to a Datspire server, and the App does not store the purchase details on your device.

Advertisements are requested only after Google Play has confirmed, while the App is open, that your Google Play account has not bought Remove ads. If Google Play cannot be reached when the App opens, or a purchase cannot be checked, the App requests no advertisements. If Google Play has confirmed that there is no purchase, and a later check while the App is still open cannot reach Google Play, the App keeps that answer and can still request advertisements. Once Google Play confirms the purchase, the App requests no advertisements.

If Google Play last confirmed that you had not bought Remove ads, the App may start Google's consent check and advertising software when it opens and you reach a main screen, before Google Play answers again. No advertisement is requested before that answer. If you bought Remove ads on another device, this can happen on this device until Google Play shows the purchase here.

To apply these rules, the App keeps three times on your device: when it was first opened, when the last full-screen advertisement was shown, and when Google Play last confirmed that there was no purchase. They are not included in a backup archive made by the App, and Erase app data removes them.

Apart from the advertising and purchase services described in this section, the App does not use Datspire accounts, remote analytics, subscriptions or remote crash reporting. The policy-update check described in section 8, the download of a newer policy document that it can lead to, and the requests made by Google's advertising software and by Google Play for purchases are the only network requests the App makes.

Before enabling a future service that changes these practices, Datspire will update this Policy and the applicable store disclosures.

8. Checking for updated policies

The App carries a complete offline copy of every policy document, so you can always read the version that shipped with your build, including with no connection at all.

When you open More > Policies, the App makes one request to the Datspire website to find out whether a newer version of any policy document has since been published, and one further request for each newer document it needs to download. These requests carry no part of your record: no measurements, no photographs, no notes, no goals, no name, and no identifier created by the App. They ask only which policy versions are current and for the text of a newer one.

Like any request to a website, each one discloses ordinary connection information — such as your IP address, the time of the request and your device's general network details — to the Datspire website and the service providers that host it. If you prefer to make no such request, read the bundled copies with the device offline; every policy remains fully readable.

The check runs only when you open the Policies screen. It is not a background poll, it does not run when the App starts, and it sends Datspire nothing about you or your use of the App.

If a newer version has been published, the App downloads it and checks that it matches, word for word, the version Datspire has published. Only then does the App show it, labelled as updated online, in place of the bundled copy. The downloaded copy is kept on your device so you can read it offline, and Erase app data removes it. The bundled copy is not changed, and you can still choose to read it.

If a request fails, times out or returns anything unexpected, the App continues to show the copy already on your device, which is the bundled copy or a newer one downloaded earlier, and says which version that is. Apart from the advertising and purchase services described in section 7, no other feature of the App uses a network connection. If you choose to open a policy online or send a support email, your browser or email app makes that connection, not the App.

9. General-wellness purpose and recommended audience

The App provides general-wellness records and estimates. It does not diagnose, treat or provide professional healthcare advice.

The recommended audience is people aged 16 and over. This is not a mandatory eligibility condition, and the current App does not verify age. Your date of birth is used only as described in this Policy; it is not used to verify your identity, age or clinical suitability.

Body measurements, notes and photographs may be sensitive. You should protect access to your device and share information carefully.

10. Changes to this Policy

Datspire may amend this Policy to reflect changes to the App, applicable requirements or information-handling practices. Each published version will state its effective date. Material changes will be notified through an appropriate channel before or when they take effect.

11. Contact and privacy complaints

Datspire — sole trader business operating in Queensland, Australia

Privacy enquiries and complaints: privacy@datspire.com

Support: support@datspire.com

Security reports: security@datspire.com

Policy URL: https://www.datspire.com/datform/policies/privacy/

If you make a privacy complaint, Datspire will review it and respond in writing with the outcome and any action taken. If your complaint remains unresolved, you may contact the Office of the Australian Information Commissioner at https://www.oaic.gov.au/privacy/privacy-complaints.