Privacy Policy
Forms Mobile ("Biểu mẫu+", "we", "our", or "the App") is a native iOS and iPadOS client for creating, editing, and viewing responses for your Google Forms. We designed Forms Mobile so your forms, questions, and respondent submissions remain directly in your own Google Account.
Forms Mobile's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We never sell Google user data, never use Google user data for advertising, and never use Google user data to train machine-learning or AI models.
1. Information Accessed & How It Is Used
| Data / Google OAuth Scope | When Requested | Purpose & Storage |
|---|---|---|
Basic Account Identityopenid, email, profile |
When you tap Sign in with Google | Used strictly for App Functionality: displays your signed-in Google email inside the app and isolates your local offline cache folder on your device. Tokens are stored exclusively in the iOS Keychain via GoogleSignIn-iOS. Your email address is never used for tracking, advertising, profiling, or shared with data brokers. |
App-Created Google Formshttps://www.googleapis.com/auth/drive.file |
When you tap Sign in with Google | Least-privilege permission used to create new Google Forms, save edits, manage co-editor sharing, and read responses directly between your device and forms.googleapis.com / www.googleapis.com. |
Link-Imported Desktop Google Forms (Optional)https://www.googleapis.com/auth/forms.bodyhttps://www.googleapis.com/auth/forms.responses.readonly |
Only if you paste a link to a desktop-created Google Form under Open by Link or Form ID | Opens, edits, publishes, and reads responses for that Google Form directly between your device and forms.googleapis.com without requiring full Google Drive file-list access. |
Pre-Existing Google Drive Forms (Optional)https://www.googleapis.com/auth/drive |
Only if you tap Sync Existing Forms from Drive and confirm the in-app disclosure | Lists your pre-existing Google Forms (application/vnd.google-apps.form) directly on your device so you can select and edit older forms created on desktop web. All Google Drive and Google Forms API requests run strictly on your iPhone/iPad; Forms Mobile never transmits or stores your Google OAuth access tokens or Drive files on external servers. |
| User-Selected Form Images PhotosPicker & Temporary HTTPS Relay |
Only when you insert a photo into a form item | Because the Google Forms REST API requires a publicly fetchable HTTPS image URL during batchUpdate, your compressed JPEG is uploaded over TLS to our ephemeral Cloud Relay authenticated solely via an OpenID Connect (idToken) identity assertion carrying zero Google Drive or Google Forms permissions, then deleted immediately after ingestion (and automatically purged within at most 15 minutes). |
Push Notifications, Live Activities & Cloud Form Monitoring (Optional)https://www.googleapis.com/auth/forms.body.readonlyhttps://www.googleapis.com/auth/forms.responses.readonly |
Only if you explicitly enable Push Alerts for New Responses on a form and confirm the isolated read-only consent | To deliver real-time Apple Push Notification service (APNs) alerts, Lock Screen / Dynamic Island Live Activities, and collaborator schema-change notifications while your iPhone or iPad is offline, our Cloud Relay stores an AES-256-GCM encrypted read-only Google OAuth refresh token (strictly scoped to forms.body.readonly and forms.responses.readonly—never write or Drive permissions), your APNs device/Live Activity push tokens, and active 7-day Google Cloud Pub/Sub watch IDs. When Pub/Sub signals a new response, the Relay diffs responses in volatile memory to format the alert and persists only SHA-256 response ID hashes and counts—zero respondent emails or answer text are ever written to Relay disk. Tapping Disconnect Google Account immediately revokes the Relay token and purges all watches. |
| First-Party Anonymous Diagnostics & Crash Telemetry ( personProfiles = .never, NSPrivacyTracking = false) |
While using the app (can be turned off anytime in Account & Privacy) | Routed through our first-party HTTPS relay to record anonymous feature usage counts, screen/session duration, crash stack traces, and sanitized API error codes keyed only to a random installation UUID. Strips Apple hardware identifiers (zero IDFA, zero identifierForVendor) and never receives your Google email, OAuth tokens, form IDs, question text, or form responses. |
2. On-Device Storage & Zero Cross-App Tracking
- Local Offline Draft Cache: Active form snapshots and unsynced offline edits are cached locally inside your iPhone/iPad sandbox (
Application Support/FormsCache) and protected by iOS Data Protection. - Zero Ad Networks or Cross-App Tracking: Forms Mobile embeds zero advertising networks, never accesses Apple's Advertising Identifier (IDFA), and sets
NSPrivacyTracking = false. You can opt out of anonymous product analytics and crash diagnostics at any time under Account & Privacy → Share Anonymous Usage & Crash Diagnostics. - Language Preference: Your chosen UI language (
vi/en/ System) is stored locally on your device viaUserDefaults.
3. Disconnecting Your Account & Deleting Data
Forms Mobile does not create a proprietary user account on our servers. You can revoke access and delete all local data at any time:
- Open Forms Mobile → tap the top-left Account button → Account & Privacy → tap Disconnect Google Account & Delete Local Data. This revokes Forms Mobile's Google OAuth token and permanently deletes your cached drafts from the device.
- You can also revoke Forms Mobile's OAuth grant directly in your Google Account at https://myaccount.google.com/permissions.
- Uninstalling the app removes all sandboxed data from your iPhone or iPad immediately. Your Google Forms in Google Drive remain untouched unless you explicitly move a form to Google Drive Trash.
4. Contact
For privacy questions or requests, please visit our Support page.