Privacy Policy

Effective date: October 7, 2026

This policy explains what information OneForm handles, why, who it is shared with, and the choices you have. Fitness and nutrition information is sensitive, and OneForm is built so that what you log stays private unless you choose to share it.

Who we are

OneForm is operated by Shoma Koshiba, Japan. Our address will be provided without delay upon request to oneform.support@gmail.com. For privacy questions or requests, contact oneform.support@gmail.com.

OneForm is offered in Japan only, to people aged 18 or older. During setup OneForm asks your age, and setup cannot be completed with an age under 18.

Information OneForm handles

• Account: your email address, sign-in identifiers and authentication sessions.
• Profile: display name, username, avatar and app settings.
• Setup details: age or date of birth, sex, height, weight and goals.
• Training: workout sessions, exercises, sets, duration, sports and activity estimates.
• Food: meals, calorie and macronutrient estimates and your corrections, photos you choose to attach, and saved recipes.
• Body and planning: hydration, weight entries, soreness and body information, plans and progress records.
• Optional sharing (Circle): posts, friendships, reactions, blocks, mutes, reports, appeals and an in-app notification inbox.
• Subscription: if you subscribe, an app user identifier and your subscription and purchase status. Payment details are handled by Apple or Google, not by OneForm.

OneForm uses the camera only when you choose to photograph a meal, scan a barcode or take a photo to share, and the photo library only when you choose a picture. OneForm does not access your contacts, location or microphone.

OneForm does not include advertising, advertising-attribution or third-party analytics software. Our hosting and service providers keep operational and security logs.

Apple Health (HealthKit)

On iPhone you can choose to connect Apple Health. This is optional, and the rest of OneForm works without it. iOS asks for your permission for each kind of data, and you can change those permissions at any time in the Health app.

OneForm reads only the following from Apple Health:

• Step count
• Walking and running distance
• Walking speed, used to estimate your walking pace
• Active energy burned
• Workouts: the activity type, start and end time, duration, and the energy and distance recorded for the workout
• Body weight (body mass)

With each of these, OneForm also reads the name of the app or device that recorded it, so the figure can be labelled with its source.

OneForm never writes to Apple Health. It does not add, change or delete anything in the Health app.

How this data is used and stored:

• It is used to show your movement, workouts and weight readings in Progress, including an optional walking estimate.
• It is kept on your phone only, covering roughly the last twelve weeks. It is not uploaded to OneForm's servers.
• It is not sent to any AI provider, is not used for advertising, and is not shared with anyone.
• One exception, which you control: when Apple Health has a weight reading, OneForm can offer it to you. If you choose to add it, that single reading is saved to your OneForm account like any other weigh-in, marked as coming from Apple Health. Nothing is added automatically.

You can remove everything OneForm has read from Apple Health with Settings → Apple Health → “Forget Health data on this phone”. It is also cleared when you sign out. Weigh-ins you chose to add stay in your weight log until you delete them.

Snapchat (Login Kit / Bitmoji)

You can choose to connect Snapchat so that your Bitmoji is shown as your OneForm profile picture. This is optional.

• If you connect Snapchat, OneForm stores only the web address (URL) of your Bitmoji image and the date and time you connected it.
• When you connect or update your Bitmoji, OneForm asks Snapchat for it, then deletes the Snapchat access token right after use. It keeps no ongoing connection to your Snapchat account.
• Your Bitmoji is then shown as your profile picture. It is visible to your friends in OneForm and to people who find you through username search.
• OneForm does not store your Snapchat display name, your Snapchat user ID or any Snapchat access tokens.
• OneForm never posts to Snapchat.
• Your Bitmoji image is loaded from Snap's servers when it is shown in the app.
• You can remove your Bitmoji from your OneForm profile at any time, in Edit Profile. Removing it deletes the stored web address and date from OneForm; your uploaded photo or your initial is shown instead. It is also deleted when you delete your account.

Information received from Snap is also subject to Snap's own Privacy Policy.

Notifications

OneForm uses one kind of device notification: an alert that tells you when a workout rest timer has finished. It is a local notification, scheduled on your own phone when you start a rest timer. OneForm asks for notification permission the first time you use a rest timer, not before.

OneForm does not send remote push notifications. It does not collect a push notification token from your device and does not send notifications from its servers.

Friend requests and updates from friends appear in the notifications list inside the app. They are shown only when you open OneForm and are not delivered as device notifications.

You can turn device notifications off at any time in your phone's settings: on iPhone, Settings → Notifications → OneForm; on Android, Settings → Apps → OneForm → Notifications. The rest timer still counts down on screen with notifications off.

AI features

Some features use an AI provider, Anthropic, to process information. Each is optional, and manual food logging and the other non-AI features remain available without them.

• Meal scan: when you allow it, the photo you select is sent through OneForm's server to Anthropic to produce an estimate. Location and other embedded metadata are removed from the photo first. The estimate is always shown to you to confirm or correct, and is never saved as a meal on its own.
• Weekly report: when you allow it, summaries of your goal, workouts, nutrition and weight trend for the completed week are sent to Anthropic.
• Coach: when you use Coach, your messages and a summary of the progress figures you have logged in OneForm are sent to Anthropic.

Apple Health data is never sent to an AI provider.

OneForm uses Anthropic's Claude API under Anthropic's Commercial Terms. According to Anthropic:

• Anthropic automatically deletes API inputs and outputs within 30 days, unless it needs to keep them longer to enforce its Usage Policy or to comply with the law (source).
• Content flagged by Anthropic's safety systems as violating its Usage Policy may be kept for up to 2 years.
• Anthropic does not use inputs or outputs from its commercial products, including the API, to train its models by default (source).

Service providers

• Supabase — sign-in, database records, file storage and server functions.
• Anthropic — the optional AI features described above.
• RevenueCat, with Apple or Google — subscriptions and purchase status.
• Snap — your Bitmoji, if you choose to connect Snapchat.
• Expo — app build and update delivery. API hosting: Expo (EAS Hosting), running on Cloudflare's network.

Where information is processed

• Account data, database and file storage (Supabase): Japan (Tokyo).
• AI features (Anthropic): United States.
• OneForm's API server: global (Cloudflare network)

Information processed outside Japan

OneForm is operated from Japan, and your account data is stored in Japan. Some of the service providers above process information in other countries:

• Anthropic (United States): what you send to an AI feature, as described under the AI features above.
• RevenueCat (United States): your subscription and purchase status.
• Snap (United States): only if you connect Snapchat. The one-time sign-in happens on Snap's servers, and your Bitmoji image is loaded from them.
• Expo and Cloudflare (United States, and Cloudflare's data centers in other countries): requests between the app and OneForm's API server pass through their network, usually at a location near you. This includes the photos and entries those requests carry.
• Apple and Google (United States and the other countries where they operate): purchases you make through the App Store or Google Play.

The data-protection laws of these countries may differ from those of Japan. To protect information processed there, OneForm relies on the contractual data-protection terms each provider commits to, such as its data processing agreement and terms of service. You can ask for more information about these safeguards at oneform.support@gmail.com.

Sharing with friends

What you log is private. Posting to Circle is a separate, explicit choice each time, and a post is visible only to your friends. Calories, macronutrients, weight, body measurements, soreness and per-set performance cannot be attached to a post.

Photos in posts are stored privately and shown only to people allowed to see the post. A friend who has already seen a post may keep a copy or a screenshot, and blocking or deleting cannot remove copies someone else has kept.

How information is stored

Your account data is stored with our service providers. Sign-in tokens on your device are kept in the iOS Keychain or Android Keystore. To make the app work, OneForm also keeps some of your information in app-private storage on your device; signing out clears it.

Retention and deletion

You can delete your account in the app under Settings → Account → Delete account, or by following the steps on the account deletion page. Deleting your account removes your sign-in account, your profile, your logs and records, and your uploaded photos.

Deleting your OneForm account does not cancel a subscription billed by Apple or Google. Cancel it through the store account that made the purchase.

How long information is kept

OneForm does not delete your records on a timer. In general they are kept until you delete them or delete your account.

• Logs and records (food, workouts, sports, water, weight, soreness, goals and plans): kept in your account until you delete them or delete your account.
• Weekly reports: kept in your account until you delete your account. They cannot be deleted individually in the app.
• Coach conversations: not saved. A conversation is discarded when you close it.
• Meal photos: kept on your phone, not on OneForm's servers, and cleared from the app when you sign out. A photo sent for a meal scan is used to produce the estimate and is not saved by OneForm's server. A photo is uploaded only if you attach it to a post or use it as your profile picture.
• Posts and their photos: kept until you delete the post or your account. Posts do not expire on their own. Deleting a post removes the post and its photo.
• Profile picture: kept until you replace or remove it, or delete your account. Replacing it removes the previous one.
• Reports, blocks and mutes: a report you made stays on record if the reported post is later deleted. Reports made by you or about you, and your blocks and mutes, are deleted when the account concerned is deleted.
• Apple Health readings: kept on your phone only, as described above.

When you delete your account:

• Your uploaded photos are removed first, then your sign-in account, and with it your profile, logs, reports, posts, reactions, friendships and subscription status in OneForm.
• Notifications you caused for other people, such as a friend request, stay in their list without your identity attached.
• Copies that friends already saved or screenshotted are outside OneForm's control.

Kept outside your OneForm account:

• OneForm keeps records of purchases and subscriptions for 7 years to meet accounting and tax obligations. Records held by Apple, Google and RevenueCat are kept under their own policies.
• Database backups: Supabase keeps automatic daily backups for 7 days. Deleted information can remain in a backup until that backup expires.
• Operational and security logs: Supabase keeps its logs for 7 days. Logs held by our hosting providers, Expo and Cloudflare, are kept for up to 90 days.

Your choices and rights

You can edit or delete what you have logged in the app, withdraw from the optional features above, and delete your account. Depending on where you live, you may also have the right to access, correct, export or delete your information, or to object to how it is used.

To make a request, contact oneform.support@gmail.com. We will ask you to verify that you control the account before acting. Privacy, access and deletion requests are completed within 30 days at most. If you are not satisfied with how a request was handled, contact us at the same address.

Changes to this policy

We will show a notice in the app at least 7 days before a material change takes effect, and update the effective date at the top of this page.