Privacy

Last Updated: June 26, 2026

Effective Date: June 17, 2026

Company: Forma Limited ("Forma," "we," "our," or "us")

This Privacy Policy explains how we collect, use, and share information when you use Forma's products and services, including mobile apps, web apps, websites, events, and programs (collectively, the "Services").

When you create an account, you are asked to review and accept this Privacy Policy before you can use the Services. In addition, the app requests your permission through your device's operating system before accessing your location, camera, photos, microphone, or calendar, and before any of that data leaves your device. You can withdraw any of these permissions at any time in your device settings.

Part I: General Privacy Policy (applies to all Services)

  1. Information We Collect

We collect the following categories of information:

  • Personal Information: Name, email address, and phone number that you provide to create and secure your account, plus payment details and any other identifying information you choose to provide.

  • Usage Information: Device details, IP address, log data, app interactions, and crash and performance diagnostics.

  • Transaction Information: Purchases, registrations, and participation in events or programs.

  • Communications: Support requests, feedback, or other messages you send to us.

  • Content You Provide: Photos, audio you submit through voice input, messages you send to in-app AI features, and documents you upload.

  1. How We Use Information

We use your information to:

  • Provide, operate, and improve the Services.

  • Process purchases and event registrations.

  • Communicate with you about your account, services, or updates.

  • Ensure security and comply with legal obligations.

  • Conduct research and improve our offerings.

  1. Data We Send to Third Parties

We send specific data to the third-party service providers listed below strictly so that they can perform a function on our behalf. Each provider processes data only on our behalf, under contract, and is not permitted to use it for its own purposes. We do not sell your personal information. The list below identifies exactly what data is sent, to whom, and why.

  • Supabase (authentication and database hosting): We send your name, email address, phone number, account credentials, and the content you create in the app. This is used to create and secure your account and to store your app data. It happens when you create or use your account, after you accept this policy at sign-up.

  • Deepgram (speech-to-text): We send the audio you record when you use voice input. This is used to convert your speech to text so the app can act on it. It happens only when you actively use the voice input feature, after you grant the microphone permission prompt.

  • Anthropic (Claude AI): We send the messages you send to AI features, your approximate location, and any images you attach to those messages. This is used to generate event-planning and personalized recommendation responses. It happens only when you actively use an AI feature. Anthropic processes this data solely to provide the feature, does not use it to train its models, and is contractually required to protect it to a standard equivalent to that described in this policy.

We may also share information with:

  • Service Providers and Partners: Only as needed to provide the Services you request.

  • Legal Authorities: If required by law or regulation.

  • Business Transfers: In the event of a merger, acquisition, or sale.

  1. Data Security

We use reasonable technical and organizational measures to protect your data. However, no system is 100% secure.

  1. Data Retention

We keep your personal information only as long as necessary to provide Services, comply with legal obligations, and resolve disputes.

  1. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access, update, or delete your personal information.

  • Request a copy of your data.

  • Restrict or object to processing.

To exercise these rights, contact us at support@forma.city.

  1. Account and Data Deletion

You can request deletion of your account and associated personal data at any time:

  • In the app: open Settings, scroll to the bottom, and tap Delete account (you will confirm by entering your account email).

  • Online: visit https://www.forma.city/delete-account and follow the instructions.

  • By email: contact us at support@forma.city.

Upon a verified request, we will delete your personal data within 30 days, except where we are required to retain certain information to comply with legal obligations. Data held by our processors is deleted accordingly.

  1. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect data from minors.

  1. International Transfers

If you use our Services from outside the United Arab Emirates, your data may be transferred to and processed in countries with different data protection laws. The providers named in Section 3 may process your data outside the United Arab Emirates.

  1. Changes to This Privacy Policy

We may update this Policy from time to time. Material updates will be communicated through the Services or by other means.

Part II: Product-Specific Privacy Terms

A. Forma (Mobile App)

When you use the Forma app, we collect and process the following, depending on the features you use. For each item we identify what is collected, why, and how your permission is obtained.

  • Account information: your name, email address, and phone number, used to create and secure your account (verified via one-time passcode). Collected when you sign up, after you accept this policy.

  • Location: approximate or precise location, used to surface relevant events and recommendations near you. Accessed only after you grant the location permission prompt, and can be disabled at any time in your device settings.

  • Camera and photos: if you choose to set a profile photo or attach an image, we access your camera and/or the specific photos you select, only after you grant the camera/photos permission prompt. We access only the specific images you pick; we do not scan your photo library.

  • Microphone / audio: if you use voice input, we record audio for the duration of your request and send it to our speech-to-text provider (Deepgram) to convert it to text. Audio is captured only after you grant the microphone permission prompt and only while you are actively using voice input. We do not record audio in the background.

  • Calendar: if you add an event to your calendar, we read and write calendar entries solely to create that event on your device, only after you grant the calendar permission prompt. We do not store or transmit your other calendar data.

  • AI features: some features (event-planning chat and personalized recommendations) use a third-party AI provider, Anthropic (Claude). When you use these features, the messages you send, your approximate location, and any images you attach are transmitted to Anthropic to generate responses. This transmission happens only when you actively choose to use an AI feature. Anthropic processes this data solely to provide the feature, does not use it to train its models, and is contractually required to protect it to a standard equivalent to that described in this policy.

We use this information to operate the app, personalize event recommendations, and provide the features you request.

B. Events

When you attend Forma events:

  • Data Collected: Registration details, ticketing information, and participation preferences.

  • Sharing: With ticketing platforms, venues, and event partners.

  • Purpose: To manage event access, communications, and safety.

C. Fellowship (Web App and Program)

For participation in the Fellowship program:

  • Data Collected: Application details, founder background, and engagement activity on the community hub.

  • Sharing: Limited to program facilitators, mentors, or service providers offering perks.

  • Purpose: To administer the program, connect participants, and provide resources.

Part III: Contact Us

If you have questions about this Privacy Policy, please contact us:

Forma Limited Office A, RAK DAO Business Centre, RAK BANK, ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates farhaj@forma.city