Privacy policy

What this policy covers

This policy covers getformbox.com and the Formbox iOS app.

Formbox has no server. The app talks to Google directly from your device. There is no Formbox account, no Formbox database, and no Formbox server that receives, stores or processes your Google data or your form responses. We cannot read your responses, because they never reach us.

Information we use

Website requests. Cloudflare hosts and protects this website. It processes technical information such as your IP address, browser information and requested pages to deliver the site and prevent abuse.
Fonts. The site loads fonts from Google Fonts. Your browser sends Google technical request information, including your IP address, when downloading those fonts.
Support messages. If you email us, we receive your email address and anything you include in the message. We use this information to answer you and handle your request. Email service providers process the messages to deliver and store our correspondence.
Sample data. Choosing “See how it works” opens invented inquiries in a separate example session. Example edits stay in memory until the session ends, and contacts and reminders are simulated.

What the app does with your Google data

All of the following happens on your device, between your device and Google. None of it passes through us.

Signing in. Google tells the app your name, email address and profile picture, so it can show which account is connected. Google's Sign-In library keeps the resulting access tokens in your device's keychain. We never see them.
Your form. When you connect a form, the app reads that form's questions and its responses from Google, using the permissions you granted. Signing in alone does not give the app access to your forms; access to a form is requested separately, at the moment you connect one.
Your respondents' answers. Form responses usually contain other people's personal information — names, email addresses, phone numbers, whatever your form asks for. That information is yours and your respondents'. The app stores a local copy. If you choose Export, it creates files that can contain these answers and lets you choose where to save or share them.
Your follow-up work. Manual inquiries, statuses, notes, reminders and recorded activity are saved on this device, separately for each signed-in Google account. Formbox does not upload them to us or sync them between devices. Exports you choose to save or share may contain this information.

The app requests no permission to send email on your behalf and no Google Drive API permissions. Replying to an inquiry opens your own mail or phone app; Formbox does not send messages for you.

Purchases, reminders and exports

Apple processes the one-time in-app purchase. Formbox uses StoreKit on your device to check purchase access and receive transaction updates; we do not receive your payment details. Purchase restoration checks access for your Apple Account and does not restore local inquiry records. Apple’s handling of purchases is described in Apple’s privacy policy.

With notification permission, the app schedules local reminders that can display an inquiry name and follow-up information on your device. You control notification visibility in iOS Settings. These are not server-sent alerts. Exported files and information you choose to send through Mail or another app are handled by the destination you select.

Deleting your data

You control the app’s local copies and any exports you create:

Sign out to disconnect Google and hide that account’s records from the app. Signing out preserves its saved files on this device; it is not deletion.
Delete your account from Account → Your data → Delete account and data. This permanently removes everything the app stores for that Google account on this device — connected forms, manual inquiries, statuses, notes, reminders and staged exports — and revokes Formbox’s access to your Google account. We hold no copy to restore.
Delete a manual inquiry in its detail screen to remove it and its recorded workflow, or delete the app to remove its local records for all accounts. Separately remove any exported files or backups you saved if you want those copies deleted too.
Revoke access at any time from your Google account's third-party connections page. Formbox loses access immediately, whether or not the app is installed.

Deleting responses from Formbox does not delete them from Google Forms; your form and its responses remain in your own Google account. See data deletion for details.

We use the providers above to deliver the website and respond to messages. Their technical data handling is described in Cloudflare's privacy policy and Google's privacy policy. We may also disclose information when required by law or necessary to address abuse or a security incident.

We do not sell personal information, use it for targeted advertising, or use support messages to train AI models. Neither the site nor the app contains advertising, analytics or tracking scripts, and the app sends no usage data anywhere. Website traffic uses HTTPS; please do not send passwords, access tokens or form respondents' private information by email.

Google's own handling of your account, your forms and their responses is governed by Google's privacy policy, not this one. Formbox's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and your choices

We keep support correspondence while handling your request and any related follow-up, and for longer only when needed to meet a legal obligation or resolve a dispute. You can request deletion when the conversation is finished. Hosting and font providers handle technical request records under their own retention practices described in the policies linked above.

Email support@getformbox.com to request access to, correction of, a copy of, or deletion of personal information we hold about you. We may need to verify that the request is yours. We respond as required by applicable law. If we decline a request, you can ask us to reconsider by replying to the same email address. See data deletion for details.

Changes

Updates will appear here with a revised date. Before introducing data practices not described above, we will explain the information involved, its use, storage, sharing and deletion, and obtain consent where required.