Re:Formd

Legal · v2

Privacy Policy

Last updated October 21, 2026

To exercise your data-control rights described below, visit Data controls.

Re:Formd Privacy Policy

Version 2 · Last updated October 21, 2026

1. Who we are

Re:Formd is an AI-powered health and wellness advisory platform owned and operated by Retrospect LLC ("we", "us"). This policy covers the Re:Formd app, website and related services.

2. What we collect

You provide:

  • Account: email address, sign-in credentials (passwords are stored hashed), name, and your mobile phone number if you sign in with a text-message code or add a number to your account.
  • Health information: conditions, medications, supplements, allergies, symptoms, labs and biomarkers, check-ins, height, weight, date of birth, goals, and the reports and insights generated from them.
  • Sensitive information: pregnancy or postpartum status, sex at birth and gender identity, if you choose to provide them.
  • Fitness and nutrition: workouts, activity, sleep and recovery, meals and hydration.
  • Content: photos (for example food, labels, lab documents, progress and profile photos), uploaded lab PDFs, journal entries, questions and messages to Sabrina, voice input converted to text on your device or by Apple, messages with coaches you connect, and survey answers.
  • Life context: answers about occupation, schedule or caregiving that you choose to give.

From services you connect: if you connect WHOOP, we import activity, sleep and recovery data from it.

Automatically:

  • Identifiers: your account id; a push-notification token; a random install session id. We do not use advertising identifiers.
  • Usage: in-app events (for example screens viewed, check-ins completed), linked to your account.
  • Diagnostics: error reports, which are scrubbed of user id, email, request content and health text before they are sent (on your device for the app, on our servers for our backend); performance timing; AI usage records (for example tokens, latency, outcome).
  • Purchases: subscription status and history. We never receive your card details.
  • Text-message records: if you ask for a sign-in or verification code by text, we keep a delivery record (your number, partly masked; delivery status; time). The code itself is never stored outside our sign-in system.

We do not collect your location, contacts or browsing history.

3. How we use it

  • To provide Re:Formd: your health record, Sabrina's answers, Health State Reports, plans and reminders.
  • To personalize educational information, insights and recommendations for you.
  • To process purchases and manage Membership.
  • To keep Re:Formd safe and reliable: security, fraud prevention, error monitoring, and limits on AI usage.
  • To understand and improve how Re:Formd is used. In the app, our analytics are first-party: usage events are recorded in our own systems (hosted by Supabase) and linked to your account, including an internal analytics profile (email, age bracket, gender, country, time zone and plan). We do not share them with advertisers or with third-party analytics providers. Our public website works differently; see Google Analytics in §4.
  • To communicate with you about your account, support requests and important changes.
  • To comply with the law.

AI processing. To answer you, Sabrina sends relevant parts of your health information and content to our AI provider (OpenAI). We include your first name so Sabrina can address you, but we do not send your email address or account id. We do not use your health information to train AI models, and we don't authorize our AI provider to do so.

We do not sell your personal information or health information, and we do not use it for targeted advertising.

4. Who we share it with

  • OpenAI. AI answers, extraction, nutrition parsing, journal enrichment, and Health State Reports. Health information and content needed for the request, and your first name. Not your email or account id.
  • Google (Document AI). Reading uploaded lab documents. The uploaded document.
  • Supabase. Hosting, database, sign-in, and storage. All stored data.
  • Apple and RevenueCat. In-app purchases. Account id as customer id, and purchase events.
  • Stripe. One-time purchases on our website (The Peptide Blueprint). Membership is not sold on the website. Billing details you give Stripe.
  • Resend. Email delivery. Email address and message.
  • Bird. Text-message (SMS) delivery of sign-in and verification codes. Mobile phone number and the code message.
  • Google (Analytics). Understanding how visitors use our public website, only if you agree. Pages visited, basic device and browser details, and an analytics cookie. Not used on account pages.
  • Sentry. Error monitoring. Scrubbed error reports (no user id, email, request content, or health text).
  • Expo. Push notifications. Push token.
  • WHOOP. Only if you connect it. Authorization to import your data.
  • OpenFoodFacts; Crossref, DuckDuckGo, Wikipedia. Food and reference lookups. A barcode, or a search query with no identity attached.
  • Coaches, gyms, or organizations you connect. Your choice. What you choose to share. Your coach always sees the plans they assign you and your progress on them. Managers at the organization see whether you're on track with those plans (status and completion counts), never your record.

On our public website, we use Google Analytics to understand how visitors use our pages, but only if you agree. We don't use it on account pages, and we don't sell your data or use it for advertising.

If you contact us through Facebook Messenger, Instagram or TikTok, those platforms process your messages under their own privacy policies. We receive and keep the conversation so we can help you.

Text messages. If you give us your mobile number, we use it to text you one-time sign-in and verification codes, and only when you ask for one. Message and data rates may apply. Reply STOP to any message to stop receiving texts (you can still sign in with email) or HELP for help. We do not sell, rent or share your mobile phone number or your text-message opt-in information with third parties or affiliates for their marketing or promotional purposes. We will not send you marketing texts unless you separately agree to them, and you can withdraw that agreement at any time.

Enter your mobile number on the Re:Formd sign-in screen and tap Send code. We text a one-time sign-in code only. One message per request. Msg & data rates may apply. Text HELP for help. Text STOP to cancel. The mobile number and text opt-in are not shared for marketing.

These providers process data on our behalf under contract. We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale (with the same protections continuing).

5. How long we keep it

We keep your information while your account is active. When you delete your account, we delete it except for the records described in §6.

6. Your choices and rights

In the app (Account → Privacy & Data) or at getreformd.com/data-controls:

  • Export health data to download a copy of your data. The export contains your account details and journal.

  • Delete health data while keeping your account. This happens immediately and removes your health record, assessments, check-ins, labs and uploaded documents, nutrition, body and training logs, plans, goals, tasks and routines, journal entries, and Health State Reports. It keeps your account and sign-in, your conversations with Sabrina and with any coach, your coach connections, your Membership and purchase records, usage and AI-usage records, app analytics events, legal acceptances, push-notification registration and connected services (for example WHOOP). Delete your account to remove those.

  • Delete your account in the app (Account → Privacy & Data → Delete account), or request it at getreformd.com/data-controls. In-app deletion happens immediately, and we show you what is deleted and what is kept before you confirm. It deletes your account, your health data and the other records above, including your Sabrina and coach conversations, support messages, analytics events, push-notification registration and connected services. A small set of records is kept without your name, email or account id (replaced by a random deletion id):

    • Membership, purchase, billing, entitlement and AI-usage records, for legal, tax and chargeback purposes;
    • legal acceptances and consent records (with IP address, device details and any typed signature removed), as proof of what was agreed;
    • audit records of account changes, so they stay verifiable.

    We keep those records only for legal, tax, chargeback, and security purposes, and we delete them when those purposes no longer require them. Deleting your account does not cancel an Apple subscription; cancel it in your Apple ID settings.

  • Stop text messages by replying STOP to any message we send, or by removing your mobile number in the app. Sign-in by email keeps working.

  • Correct your information where the app provides settings, or by contacting us.

Depending on where you live, you may have rights to access, correct, delete or port your data, to withdraw consent, and to appeal our decision. We do not discriminate against you for exercising them. Contact support@getreformd.com.

7. Security

We use encryption in transit, access controls and monitoring. No system is perfectly secure.

8. Children

Re:Formd is for adults 18 and over. We do not knowingly collect information from anyone under 18. Contact us if you believe we have, and we will delete it.

9. Where data is processed

Re:Formd is operated in the United States, and our providers process data in the United States and possibly other countries.

10. Changes

We will notify you of material changes in the app or by email before they take effect and, where required, ask for your consent again.

11. Contact

Retrospect LLC · support@getreformd.com