Privacy Policy for dat.form
In short
dat.form records your body measurements, your weight and your progress photographs on your phone. It has no account, no server, and no advertising. In this version the app has no permission to use the internet at all, so it cannot send your information anywhere even if it tried.
What the app stores
All of it is created by you, and all of it stays on your device:
- Body measurements: neck, shoulders, chest, waist, hips, biceps, forearms, thighs and calves
- Body weight
- Body-fat percentage, whether you enter it or the app estimates it
- Sex, height and year of birth
- Your goal, its targets and its dates
- Notes you type
- Progress photographs
- A display name and a short “about you” line, if you choose to give them — both optional, and neither is used in any calculation
- Analysis the app derives from the above, such as composition estimates and progress reports
- Your settings: theme, units and coach choice
- Crash reports, described below
The app does not collect your name unless you type one, your email address, your location, your contacts, your advertising identifier, your device identifier, or any account credential. There is no account to create.
No profile photograph is collected. The profile picture is drawn from your initials.
Where it is stored
In the app’s private storage area on your device. On Android this area is encrypted at rest by the operating system and is not readable by other apps.
Progress photographs are written to that private area — not to your camera roll or gallery, and not to any shared media folder. They do not appear in other apps’ photo pickers.
What leaves your device
Nothing.
This is a statement about this version, and it is enforced rather than promised:
- The app contains no networking code — no HTTP requests, no sockets, no third-party SDK that transmits.
- The released app does not request the internet permission. An Android app without that permission cannot open a network connection, whatever its code says.
- There is no analytics, advertising, attribution, or crash-reporting service in the app.
There is no account, no login, no cloud backup, no sync and no remote configuration.
Crash reports
If the app hits an unexpected error it records what happened so the problem can be fixed.
- Recorded: the error name and message, where in the code it happened, when, and whether it stopped the app.
- Not recorded: your measurements, weights, photographs, photograph locations, profile details, or notes.
- File paths and check-in identifiers are stripped out before the report is saved, so a report you choose to share cannot carry them.
- Reports are kept on your device, at most twenty at a time. You can read them and delete them in Settings under Data and privacy.
- They are never sent anywhere, automatically or otherwise. If you want the developer to see one, you have to send it yourself.
Permissions, and why
| Permission | Why |
|---|---|
| Camera | To take your progress photographs. Used only while you are taking one |
| Photos and media (Android 12L and below only) | To let you choose an existing photograph instead of taking one |
| Vibrate | Brief feedback when a photograph is taken |
The app asks for no other permission. It does not use your location, your microphone, your contacts, or your phone state.
Analysis on your device
The app estimates body composition from your tape measurements using a published anthropometric formula, and it uses on-device pose detection to check that a photograph is framed well enough to compare with your others.
That analysis runs entirely on your phone. No photograph and no measurement is sent anywhere to be analysed.
These figures are estimates, not medical measurements. dat.form is not a medical device, does not diagnose anything, and is not a substitute for advice from a qualified professional.
Backups you make yourself
You can export your data as an encrypted archive.
- It is encrypted with a passphrase you choose.
- You decide where it goes, through your device’s own share sheet.
- The app never uploads it. If you save it to a cloud drive, that is your action and your provider’s terms apply to it.
- There is no recovery. If you lose the passphrase the archive cannot be read, by you or by anyone else. The app warns you about this before exporting.
Deleting your data
- Deleting a check-in deletes its measurements and its photographs.
- Erase all data in Settings deletes every check-in, every measurement, every photograph file, your profile, your goal, your measurement choices and all your settings, and returns the app to how it was on first launch.
- Uninstalling the app removes everything it stored.
There is no copy anywhere else, so there is nothing to request from us and nothing for us to delete on your behalf.
Children
dat.form is not directed at children under 13, and is not intended for them.
Changes to this policy
If this policy changes, the revised version will be published at this address with a new effective date. A future version of the app may add features that use the internet; if that happens, this policy will be updated before those features ship, and the change will be described plainly rather than folded silently into a new version.
Contact
Questions about this policy or about your data: bodyprogressapp@gmail.com
This policy is governed by the law of Queensland, Australia.