FormFlow Privacy Policy

Effective Date: 03.07.2026

About This App and Who We Are

FormFlow is a companion app for iOS that lets you browse, create, and manage forms and files stored in your own Google Account, using Google Drive and Google Forms directly. FormFlow does not operate its own separate storage backend for your forms or files — it acts as an interface to data that already lives in your Google Account.

Operator: PocketCraft OÜ
Contact: support@pocketcraft.site

You must sign in with your Google Account to use FormFlow's core features (browsing, creating, and editing forms and files). Without signing in, the App cannot function, because it has nothing of its own to show you.

Information From Google Sign-In

When you sign in, Google shares your basic profile information with the App — your name, email address, and profile photo — so the App can identify your session. FormFlow also requests permission, through Google's own consent screen, to access your Google Drive files (to list, open, upload, rename, move, and delete files on your behalf) and your Google Forms (to list your forms and read their responses).

You grant or deny these permissions directly through Google's consent screen, and you can review or revoke them at any time at myaccount.google.com/permissions.

FormFlow's use and transfer of information received from Google APIs adheres to the "Google API Services User Data Policy," including Limited Use requirements.

Your Forms, Files, and Responses

The content of the forms you build, the files you manage, and the responses collected from people who fill out your forms are stored in your own Google Drive and Google Forms account, not on servers we operate. FormFlow reads and writes this content on your behalf, using your Google authorization, each time you use the App.

If you distribute a form you've built to other people, their answers become part of your Google Forms data under your own Google Account, subject to Google's handling of that data. As the form's creator, you are responsible for what you ask respondents and for complying with any law that applies to collecting their information.

Images and Attachments You Add to a Form

If you attach a photo to a form question using the App's image picker, that photo is uploaded to your Google Drive so it can be embedded in the form. Files uploaded this way are set to be viewable by anyone with the link, so that the image displays correctly to people filling out your form — they are not kept as private files. Please keep this in mind before attaching sensitive or personal photos to a form.

Information Collected Automatically

We collect app usage and interaction events, such as which screens and features you use, through Firebase Analytics and Amplitude. We also collect crash and error events for stability purposes, and device and app version information needed to keep the App working correctly. Some diagnostic logs are kept only on your device to assist with local troubleshooting and are never transmitted to us.

Public Template Library

FormFlow includes a library of public form templates, retrieved from our database. This library is read-only and does not involve any of your personal data — it exists only to show you starting templates.

Subscription and Purchase Information

If you purchase a subscription, our subscription management provider processes your purchase through Apple's StoreKit, including subscription tier, trial status, and renewal state, in order to unlock paid features and validate your entitlement.

How We Use This Information

We use the information described above to provide the App's core functionality, letting you view and manage your own Google Drive files and Google Forms. We also use it to understand aggregate feature usage and diagnose crashes so we can improve the App's stability and design, to manage and validate subscription entitlements for paid features, to measure the effectiveness of our own marketing campaigns where you have granted App Tracking Transparency permission, to respond to support requests you send us, and to comply with legal obligations and prevent misuse of the App.

For users in the European Economic Area and the United Kingdom, our legal bases for this processing are performance of a contract, our legitimate interest in operating and improving the App, and, where required, your consent.

Third-Party Services

FormFlow integrates with Google, for Sign-In, Google Drive, and Google Forms, which hold your forms, files, and responses under your own Google Account and Google's own privacy policy. We use Firebase for aggregate usage analytics, the public template library, and app configuration. We use Amplitude for aggregate usage analytics.

We do not integrate any in-app advertising network, and none of the above providers are permitted to use FormFlow data to build advertising profiles for their own purposes.

Data Storage, Retention & Security

Your forms, files, and form responses are stored in your own Google Account, governed by Google's own retention and security practices, for as long as you keep them there. We do not keep a separate copy of your forms, files, or responses on infrastructure we control. Analytics event data is retained according to those providers' standard retention windows and is not linked back to your form content. Subscription and purchase records are retained for as long as needed to manage your entitlement and to meet financial record-keeping obligations. All communication between the App and our service providers occurs over encrypted connections.

Your Privacy Rights

If you are in the European Economic Area or the United Kingdom, you have the right to request access to, correction of, or deletion of your personal data, to request a portable copy of it, to object to or restrict certain processing, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

If you are in California, you have the right to know what personal information we hold about you, to request its deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA, and we will not discriminate against you for exercising these rights.

To manage your Google-held data, use Google Drive or Google Forms directly, or revoke FormFlow's access entirely at myaccount.google.com/permissions. To control ad-attribution tracking, use your device's Settings, Privacy and Security, Tracking. For anything else, including analytics, subscription records, or support requests, email us at support@pocketcraft.site.

Children's Privacy

The App is not directed at children under 13, or under 16 in jurisdictions where that is the relevant age, and we do not knowingly collect personal information from children in that age group. Because sign-in is handled entirely through Google's own age-gated account system, a child would need a qualifying Google Account to use the App at all. If you believe a child has provided us with personal information, contact us at support@pocketcraft.site and we will delete it.

International Data Transfers

Because our service providers operate infrastructure in multiple countries, your information may be processed outside your own country of residence. Where this involves a transfer out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as standard contractual clauses, provided by those service providers.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable law. We will update the effective date above when we do. Continued use of the App after an update constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at:

PocketCraft OÜ
Estonia, EU
support@pocketcraft.site