Legal
Consent Policy
Last updated: July 2026 · FORMA
Disclaimer: This document is provided for informational purposes and does not constitute legal advice.
Scope
This policy explains when and how we ask for your consent to process personal data beyond what is strictly necessary to deliver core scanning services.
Core service processing
Creating an account and completing scans requires processing of images, depth data, and derived measurements to provide the service described in our Terms. This processing is necessary to perform our contract with you.
Optional consent
- Coach or family sharing: Requires explicit invitation and acceptance by each party.
- Marketing emails: Opt-in at signup or via preferences; unsubscribe anytime.
- Non-essential cookies: Banner or settings control where legally required.
- De-identified research: Separate opt-in; never includes sale of identifiable scan data.
- Wearable integrations: Enabled only after you authorize the third-party connection.
Withdrawal
You may withdraw optional consents without affecting lawful processing that occurred before withdrawal. Revoke sharing links, disconnect wearables, or update email preferences in account settings. Contact [email protected] for assistance.
Children and family profiles
Family profiles for minors must be created and managed by a parent or legal guardian who consents on their behalf. We do not knowingly collect data from children without verifiable parental authorization.
HIPAA
Consent under this policy does not make consumer FORMA accounts HIPAA-covered. Covered entities should use enterprise agreements for regulated workflows.