Forma
Privacy policy
This policy explains what Forma collects on the public site and inside a gym workspace, and why.
Who this covers
Forma operates the gym management service at forma-official.com and the staff application at app.forma-official.com.
This policy covers visitors to the public site, gym operators who open a workspace, and the staff those gyms invite. It also describes member information a gym stores in Forma.
Who decides
Forma operates the service and decides how the platform itself is run.
Each gym decides what to record about its members, packages, attendance, and messages, and is responsible for that information. Staff accounts belong to the gym that invites them.
The public site
When you open a workspace, we receive the gym name, a workspace address, the owner’s name and email, and the plan and billing period you choose.
Messages you send to sales@forma-official.com are kept so we can reply and open the workspace.
Information we handle
The table lists the main categories. Subscription fees are paid by bank transfer in EGP. We do not ask for or store payment card numbers.
| Data | Who it is about | Why it is used |
|---|---|---|
| Gym name, workspace address, plan, and billing period | The gym | Open the workspace and invoice the subscription |
| Owner and staff names, emails, and roles | Gym staff | Sign-in, invitations, and access inside the workspace |
| Member names, phones, packages, freezes, notes, and attendance | The gym’s members | Run membership, check-in, and follow-up for that gym |
| WhatsApp templates and messages the gym sends | People the gym contacts | Deliver follow-ups the gym chooses to send |
| Bank-transfer references and invoices | The gym | Confirm payment and keep billing records |
| Security and audit logs | Staff using the workspace | Protect accounts and record sensitive changes |
Cookies
The public site does not use advertising or analytics cookies.
If a Forma administrator previews the site before it is published, the browser stores a short-lived preview cookie on forma-official.com. Staff sign-in uses a token in the application, not a marketing cookie.
Services that process information for us
Email — invitations, password setup, invoices, and messages a gym sends — is delivered through Brevo. The public site is hosted on Vercel. The application API runs on Railway. Gym data is stored in MongoDB and files on Cloudflare R2.
These providers process information so Forma can run the service.
How long we keep it
Workspace information is kept while the gym’s workspace is open, and afterwards for invoices and security logs we still need.
You can ask us to close a workspace by emailing sales@forma-official.com.
Requests
To ask about this policy, or about information Forma holds for your gym, email security@forma-official.com. We reply to the owner or an authorised staff member of that gym.
Plans · Technology · FAQ · Get started · Contact sales