Privacy Policy

Last updated: April 2026

Firma ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: Email address and name when you sign up.
Health & skin data: Nutrition logs, hydration, sleep, exercise, skin check-in scores, measurements, and symptoms you enter manually.
Progress photos: Stored on your device only. Photos are never uploaded to our servers.
Usage data: Basic app usage information for improving the product.

2. How We Use Your Data

To provide personalised coaching, correlation analysis, and weekly reports.
To generate AI coaching responses — only aggregated statistics are sent to AI services, never raw personal data.
To manage your subscription via RevenueCat.
To authenticate your account via Supabase and optionally Google or Apple.

3. Third-Party Services

Supabase — authentication and encrypted cloud storage of your health logs.
OpenAI — AI coaching features. Only anonymised, aggregated statistics are shared. No personal identifiers or raw data are sent.
RevenueCat — subscription and purchase management.
Google / Apple — optional sign-in only, if you choose to use it.

4. Data Retention

Your data is retained for as long as your account is active. You can request deletion at any time by contacting us at support@getfirma.me.

5. Your Rights

Access, correct, or delete your personal data at any time.
Export your data on request.
Withdraw consent for optional data processing.

6. Children

Firma is not intended for children under 13. We do not knowingly collect data from children.

7. Contact

For any privacy questions, email us at support@getfirma.me.