Privacy policy

1. Who controls the data

The data controller is ELEA d.o.o. Tuzla, Trg Slobode br. 1, 75000 Tuzla, Bosnia and Herzegovina. Send privacy questions and requests to formanivoapp@gmail.com. This policy describes data processing in the FORMANIVO web app.

2. Data we process

We process only the data needed for the features you use. In short, by part of the service:

• Account: e-mail, a protected password record, age confirmation, chosen language, and first and last name only if you enter them. If you write to us, we process the message and the details needed to reply.
• Questionnaires without signing in: answers in the FORMANIVO Calisthenics Challenge, Weight loss and Weight and muscle gain questionnaires stay only in the memory of the open page and are cleared on refresh or exit. We do not send them to the server unless you explicitly save them to an account.
• Programme saved to your account: after a separate explicit confirmation we store only what is needed to build, resume and track the programme. For FORMANIVO Calisthenics Challenge: the male/female version chosen for wording and visuals, goal, derived level, position/floor, balance, jump impact, space, noise, equipment and needed movement adaptations. For Weight loss and Weight and muscle gain: sex, age, height, weight, goal, total activity, experience, training location, equipment, number of days and workout duration. When nutrition is included, we also store age, sex as the formula basis, height, weight, target weight if entered, total activity, diet type and cooking preference, and the calculated energy and protein estimate. We do not store the name or e-mail from the Challenge questionnaire.
• Plan and progress: the workout schedule, personal meal plan with grams and nutritional values, meal swaps, marks for completed meals and workouts (a mark is not a food intake log), guided or interval workout state (step, rests, duration, easier variations and skipped stations), confirmed full or partial results, time zone, the active programme and the history of previous programmes. For a new cycle, after a new confirmation, we store your updated weight, activity, goal and diet choice; previous cycles stay in the history.
• What we do not store: answers about sleep, practical tips and health circumstances from the Weight loss and Weight and muscle gain questionnaires. Those answers are processed only in the open page for the safety check and summary.
• Earlier questionnaire and earlier saved records: in the earlier questionnaire (/upitnik), answers are held in the memory of the open page and cleared on refresh. Only if you press “Save my answers” at the end is a copy kept on your device for up to 24 hours for transfer to your account; that copy survives a refresh and is removed on successful transfer or when it expires. Accounts with an earlier saved questionnaire keep those answers, including safety answers for accounts that passed the safety filter, the plan built from them and the plan-tracking marks you entered yourself (bought groceries, eaten and swapped meals, completed and postponed workouts, selected day, “Favourite” and “Not for me” marks, and logged weight, reps or duration per set).
• Access and membership: plan access right and status, access start and end times, and membership status. We do not accept card details by e-mail and the app does not store them.
• Technical data: when you use the site, technical services may process your IP address and necessary access and security logs.

3. Health data and consent

Age, height, weight, movement limitations and answers about health circumstances may be health data. We ask for your explicit consent: in every questionnaire at the start, before the first question and any processing in the open page, and separately before a programme or answers are saved to your account. The consent given at the start of a questionnaire lasts only while the page is open; a refresh or withdrawing it on the page clears it together with the answers. We record the consent version and time. This consent is not consent to marketing.

You can withdraw consent by writing to formanivoapp@gmail.com (the address is also shown in “My account”). Withdrawal does not affect earlier lawful processing; afterwards we stop that processing, and a plan that depends on that data can no longer be maintained. Without consent you cannot continue the questionnaire or save a programme to your account.

4. Why we process data and on what basis

We process account data, the answers needed for a plan and the plan itself to provide, at your request, the account, the safety check and the contracted app feature; the basis is performance of a contract or steps at your request before a contract, and your explicit consent for health data. We process technical security logs to protect accounts and the service in our legitimate interest, respecting your rights. We process membership and transaction data to perform the contract and meet statutory accounting and tax obligations. We process support data to answer requests and, where applicable, meet legal obligations. Without the data needed for a plan we cannot build a personalised plan.

5. Who receives data and where it is processed

Accounts, saved answers and plans are hosted on Lovable Cloud infrastructure built on Supabase; the primary database is currently located in Ireland (EU). The infrastructure provider processes data to run the app, sign-in, and e-mail confirmation and password reset messages. Authorised ELEA d.o.o. staff access data only as far as needed for support and administration. The site loads fonts from Google Fonts; your browser sends your IP address to Google when it does.

Because we operate from BiH and the primary database is in Ireland, data is transferred outside BiH. The infrastructure provider and its subcontractors may have technical access or logs in other countries too; we do not claim that all data stays only in Ireland. For details about a specific provider, location or safeguards, write to formanivoapp@gmail.com. We do not sell answers or health data and do not use them for advertising or targeted advertising.

6. Storage on your device, PWA and tracking

Your device stores the chosen language, data needed for a signed-in session and, only after your click in the earlier questionnaire, temporary guest answers. The installed web app may store the public layout, images, fonts and an offline screen locally; plans, recipes, grocery lists and membership status are not stored for offline use. We do not use advertising pixels, user-behaviour analytics or optional cookies, we do not send questionnaire answers to analytics and we have no newsletter. The hosting provider may process technical logs needed to deliver and secure the service.

7. How long we keep data

We keep account data, answers, plans and programme history while the account exists and while they are needed to provide the service; inactive accounts are not deleted automatically. On a confirmed deletion request we remove data from the active account without undue delay, except what we must keep by law or to resolve a specific dispute. Temporary guest answers from the earlier questionnaire expire after 24 hours; an expired record may only be physically removed the next time the app is opened or browser data is cleared. We keep support messages as long as needed to resolve the reported problem or dispute. The provider keeps technical logs and backups according to its operating cycle, after which they are overwritten or deleted. We keep membership and transaction records as long as tax and accounting rules require.

8. Your rights and automated rules

Under applicable law you can request access, correction, deletion, restriction of processing, objection and data portability, and withdraw consent. You can change part of your profile and answers yourself in your account. Write to formanivoapp@gmail.com from the address linked to your account; if necessary we will ask for proof of identity. We will reply within 30 days; where needed because of complexity or the number of requests, this may be extended by up to 60 more days, and we will tell you so, with reasons, within the first 30 days. You can complain to the Personal Data Protection Agency in BiH and, if another data-protection regime applies to you, to the competent authority under that regime.

The system automatically uses your answers, by predefined rules, to choose a level and plan or to stop automatic plan creation. This is not a medical diagnosis. If you think the outcome is wrong, you can change your answer or write to the e-mail above for a human review. We do not use the questionnaire for decisions about credit, employment or similar legal matters.

9. Changes to this policy

If we change processing purposes, add a new data recipient such as a payment service provider, or introduce new tracking tools, we will update this policy before the new processing starts and show the new date. We will inform users of material changes affecting existing accounts in an appropriate way. New processing that requires consent will not start without it.