Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how Forms app ("we", "the app") handles your information. By using the app you agree to this policy.

Information we access and collect

• Google account profile — your name, email address, and profile picture, obtained through Google Sign-In, to identify your account in the app.
• Google Forms & Drive data (limited) — using the drive.file scope, the app accesses only the forms you create with the app or explicitly select via the Google file picker, plus those forms' content and responses through the Google Forms API. The app does not list or read your other Drive files.
• Push token — a Firebase Cloud Messaging token, to notify you of new responses.
• Subscription status — your purchase/entitlement state, handled by Adapty and the app stores.
• Usage analytics — anonymous/pseudonymous events and install attribution (Mixpanel, AppsFlyer) to understand feature usage and improve the app.

How we use your information

• To provide the core features: creating, editing, publishing, sharing, and analyzing your forms.
• To send you notifications about new responses.
• To manage subscriptions and unlock paid features.
• To diagnose problems and improve the app.

Google API Services — Limited Use

Forms app's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, and we do not sell it. We do not let humans read your Google data except where required for security, to comply with law, or with your explicit consent.

How we share, transfer, and disclose data

We do not sell your data, and we do not share, transfer, or disclose Google user data to third parties for their own purposes or for advertising. We share data only with the service providers below, acting on our behalf and solely to operate the features you use:

• Google / Firebase (Google Cloud Platform) — authentication, push notifications, remote configuration, and our backend, which securely stores your Google OAuth tokens and per-form notification metadata to deliver new-response notifications. Receives Google user data.
• OpenAI — only when you invoke an AI feature; it receives the form content (or, for a response summary, the responses) you choose to run AI on, solely to generate the requested output, and does not use API data to train its models. Receives Google user data only at your request.
• Adapty — manages your subscription/purchase status. Does not receive Google user data.
• Mixpanel and AppsFlyer — pseudonymous usage analytics and install attribution. Do not receive your Google Forms content or responses.

We may disclose data if required by law, regulation, or valid legal process, or to protect the rights, property, or safety of our users or the public. Your Google Forms content and responses otherwise remain in your own Google account.

Data security and protection

We protect your data — including sensitive Google user data such as your Google Forms content and responses — with the following measures:

• Encryption in transit — all communication between the app, our backend, and Google and third-party APIs is encrypted using TLS/HTTPS.
• Encryption at rest — data handled by our backend (e.g. OAuth tokens and form notification metadata) is stored on Google Cloud / Firebase infrastructure, which encrypts data at rest.
• Access controls — access to stored credentials and data is restricted to authorized systems and personnel on a need-to-know basis; we do not permit human reading of your Google user data except where required for security, to comply with law, or with your consent.
• Least privilege — the app requests only the narrow drive.file scope (limited to the forms you create or explicitly connect), not access to your entire Drive.
• Data minimization — we store only what is needed to provide the service; your Google Forms content and responses live in your own Google account, not on our servers.

AI features

The app offers optional, user-initiated AI features (AI writing assistance, create-a-form-with-AI, a form quality check, and response summaries). When you invoke one of these, the relevant form content — and, for a response summary, the form's responses — is sent through our backend to OpenAI (the OpenAI API) solely to generate the output you requested, which is then returned to you. This data is used only to provide that feature. OpenAI does not use data submitted through its API to train its models, and we do not use your Google data for advertising and do not sell it. If you never use an AI feature, no form data is sent to OpenAI.

Data retention and deletion

You can revoke the app's access at any time from your Google Account connections, or in-app via Settings → Disconnect Google account, which revokes access and removes connected forms from the app. To request deletion of any data held by our backend, email us at the address below.

Children

The app is not directed to children under 13 (or the age required by your jurisdiction).

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or data requests: art.korolchuk@gmail.com