Privacy policy

Last updated: October 3, 2026

FormNordic is operated by Speed AI, Inc. This policy covers our website, beta mailing list and iOS app. It explains what we collect, why we use it and how to request access, correction or deletion.

Information you give us

• Account information. We use Clerk for sign-in with Apple, Google, Facebook or an email code. We receive your Clerk account identifier, email address and name when available. Apple may provide a private relay email. We don’t receive your Apple, Google or Facebook password.
• Training answers. You can tell us your race or training-block goal, skiing discipline and experience, recent weekly training time, longest recent session, available days and time, preferred long-session day, snow access and training activities. These answers shape your plan.
• Plans. We store the plan you choose to save, its input answers and the information needed to reproduce and display it. Public plan previews don’t create an account or save a plan to one.
• Beta signup. We collect your email address and record the signup source, time and consent-copy version. We use Resend to manage the FormNordic Beta segment, email topic and unsubscribe preferences.
• Support messages. If you contact us, we receive your email address and whatever information you include. Please send only what is needed to resolve your request.

Information from using the service

The iOS app sends product events and crash reports to PostHog’s US cloud. Events include onboarding steps, sign-in, plan previews and saves, and use of the home and plan screens. After sign-in, events are associated with your Clerk account identifier. Session replay is off. We avoid sending free-text race names and full training answers in analytics events.

This website uses PostHog to count visits and understand how the page is used: pages viewed, the site that referred you, campaign tags in the link, clicks on the page and whether the beta signup succeeded. It sets no cookies and stores nothing in your browser. PostHog uses your IP address and browser information to estimate your country and to count unique visitors with an identifier that changes daily, and does not link visits to you or to an app account. We don’t send your email address or anything you type to PostHog, and we don’t record sessions. If your browser sends Do Not Track or Global Privacy Control, the website does not use PostHog. The website has no advertising trackers.

Cloudflare hosts the website and runs Turnstile, our spam check. Cloudflare and our service providers may process technical information such as IP addresses, browser information, request details and security signals. The signup endpoint sends the submitting IP address to Turnstile for verification. Our application signup logs record an outcome and service error status, without the email address or spam-check token.

How we use information

We use account information to provide sign-in and account access; your training answers to generate, save and display your plans; product events and crash reports to understand use and fix problems; and technical signals to protect the service. We use your beta email consent to send invitations and FormNordic product updates. Joining the list does not create an app account, promise access or reserve a launch date.

Where information is handled

Our providers include Clerk for authentication, Neon for the account and training database, an OVH server for the app API, Cloudflare for website hosting, images and spam protection, PostHog for app and website analytics, and Resend for mailing-list contacts and email. Information may be processed outside your province or country, including in the United States, under the laws where those providers operate. We use providers to operate the service, rather than for advertising or selling your personal information.

We may disclose information when required by law, to protect people or the service, or as part of a business transfer, subject to applicable privacy requirements.

Storage and retention

The app keeps onboarding answers on your device until they are saved to your account, and caches your saved plan for offline use. Signing out clears the active account’s plan cache. Your account, saved goals, training profile and plans remain on our server until you delete the account or request deletion.

Mailing-list information stays separate from your app account. Resend retains unsubscribe preferences so that another signup does not silently restart email. We retain support correspondence while needed to handle your request and operational, security or analytics records while needed for their purposes. Backups and provider-held records may remain for their retention periods. We do not promise that in-app deletion immediately erases every backup or analytics event.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information, withdraw consent, or complain to a privacy authority. Contact support@formnordic.app. We may ask for enough information to verify that the request concerns your account. Withdrawing information needed to run your account may limit the service.

To delete an app account, use the app’s Profile → Delete account flow. Apple users are asked to confirm with Apple so FormNordic can revoke its Sign in with Apple authorization. See data deletion for details and help if you cannot use the app.

To stop beta emails, use the unsubscribe or preferences link in an email. App account deletion and mailing-list unsubscribe are separate actions. You can ask support to remove mailing-list information or review analytics associated with your account.

Features still in development

Apple Health history import, a direct Garmin connection, phone-based technique analysis and a boot-mounted sensor are planned or being explored. This beta does not import Apple Health or Garmin history, record technique measurements, or collect sensor data for those features. The website’s technique report is an illustrative example. We will explain any new data collection before enabling these integrations.

Security and updates

We use access controls, authenticated account access and encrypted connections to help protect information. No service can guarantee absolute security. We will update this policy when our practices change and provide additional notice when required.

Contact us