Draft — needs legal review

Privacy Policy

This policy explains how Craftform Studio processes personal data when you use Restform.

Who we are

Data controller: Craftform Studio, Ireland. Contact: hey@craftform.studio.

What we collect

• Account data: email, display name, authentication identifiers.
• Fitness and journal data you enter: workouts, sets, mood, notes, timestamps.
• Photos you attach to journal or workout entries.
• Technical data: device/browser type, IP address, and optional analytics events if you consent on the marketing site.

Why we use it

• Provide and secure your account and sync your data.
• Store workouts, journal entries, and media you choose to upload.
• Improve reliability and understand aggregate product usage (with consent where required).
• Respond to support requests and legal obligations.

Where data is stored

Application data is hosted on Neon (PostgreSQL, authentication, and object storage) in the EU (Frankfurt). The web application runs on Vercel with serverless functions in Frankfurt (fra1) where configured.

Retention

We keep your content while your account is active. You may request deletion; we may retain minimal records where law requires.

Sharing

We use subprocessors to run the service (Neon, Vercel, email delivery). We do not sell your personal data.

Your rights

Under GDPR you may access, rectify, erase, restrict, object, and port your data, and lodge a complaint with your supervisory authority. Contact us to exercise these rights.

International transfers

We aim to process EU user data in the EU. If a subprocessor transfers data outside the EEA, we rely on appropriate safeguards.

Last updated: 11 October 2026