Last updated: 30 July 2026
Form Editor is an iOS app that lets you work with your own Google Forms. This policy explains what data the app touches, what leaves your device, and who processes it.
Your forms and their responses are read from and written to Google's servers directly by the app on your device. They do not pass through our servers, and we cannot read them.
You sign in with Google. The app requests these permissions and uses them only as described:
| Permission | What we do with it |
|---|---|
forms.body |
Read and edit the structure of your forms — questions, sections, settings. |
forms.responses.readonly |
Show you the responses your forms receive, and export them when you ask. |
drive.file |
Access only the individual files you create in the app or pick yourself. It does not grant access to the rest of your Drive. |
email, profile, openid |
Show which account you are signed in as, and address notifications to you. |
Access tokens are stored in the iOS Keychain on your device. Signing out removes them. Form Editor's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We share data only with the service providers named below, only for the purpose stated, and only to the extent listed. Each acts as our processor under a data processing agreement, or as an independent controller where Google, Apple, and OpenAI's own terms apply. There are no other recipients.
| Data | Recipient | Purpose |
|---|---|---|
| Your forms and their responses (Google user data) | Google LLC only | This is the product. Sent from your device straight to Google's Forms and Drive APIs. This data is never sent to any other recipient on this page, and never to an AI provider. |
| The description you type for an AI draft, and the AI's own previous draft | OpenAI, L.L.C. — via our Cloudflare Workers endpoint | To generate draft questions when you use "Create with AI". Cloudflare relays the request so our API key stays off your device; it does not store the content. No form stored in your Google account is ever sent — see "AI features" below. |
| Your email address, the form's ID, and the form's title | Google LLC (Firebase Cloud Functions and Firestore) | Stored only if you turn on response notifications, so we know which device to notify and what to name in the notification. Deleted when you turn it off. |
| Your email address, the form's ID and title | OneSignal, Inc. | To address and deliver those push notifications. Response content is never included — the notification only says a new response arrived. |
| Anonymous usage events, crash reports, device model, OS version | Google LLC (Firebase Analytics, Crashlytics, Remote Config) | To see which features are used and to fix crashes. |
| Purchase and subscription status, anonymous app user ID | RevenueCat, Inc. and Apple Inc. | To unlock Pro features and restore purchases. |
Beyond the table above we disclose data only where the law requires it — a valid legal process — or to establish or defend legal claims. If Form Editor is ever acquired, we will tell you in the app before your data moves to a new controller, and this policy will continue to apply until you agree to a new one.
Google user data — your forms, their responses, and your account identity — is the sensitive data this app touches. These are the specific mechanisms that protect it:
drive.file rather than
full Drive access, and read-only access to responses. The app cannot reach files you have
not created or picked.
The optional "Create with AI" screen drafts form questions from a description you type. It is our only AI feature, and it sends only that description — plus, for a revision, the draft the model itself just produced, which lives in app memory and has not been saved to your Google account. Our sole provider is OpenAI, L.L.C., on the paid OpenAI API platform, reached through our own Cloudflare Workers endpoint; we run no models of our own. No data received from any Google Workspace API is sent to it — not your forms, responses, Drive files, or account identity, in raw, aggregated, or anonymised form. Under OpenAI's API data usage policy, data submitted via the API is not used to train their models, and we do not use your data to train or fine-tune any model.
Form Editor's use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This includes any use in connection with AI or ML models: we do not transfer Workspace API user data to any AI or ML model or service, and we do not use it to develop, train, or improve such models.
Turning off response notifications deletes the stored email/form pair. Signing out removes your Google tokens from the device. To have anything else associated with your account removed, email [email protected] and we will action it within 30 days. Deleting the app removes all locally stored data, including forms cached for offline use.
Form Editor is not directed at children under 13 and we do not knowingly collect their data.
If this policy changes materially we will update the date above and, where the change affects how your data is used, notify you in the app.