Privacy policy

Forma helps small businesses organize customers, jobs, stock, and other records. This policy describes the information handled by the app and its connected services. The developer responsible for the Forma Google Play listing can be contacted at fawkesthepheonix240@gmail.com.

Information Forma handles

• Account information. Google sign-in provides an account identifier and profile information such as your name, email address, and profile photo where available. Firebase Authentication handles the sign-in session. Forma does not ask for your Google password.
• Business content. Business names, definitions, custom fields and views, customer and other records, notes, statuses, dates, amounts, links between records, import content, and change history are processed to provide the organizer. The content can include personal or financial information that you choose to enter.
• Team and access information. Memberships, roles, invitation details, and ownership information control which signed-in people can access a business.
• AI requests. When you use AI setup, customization, or Ask Forma, your prompt and relevant business structure or request context are sent to the server and Google's AI service. AI query calculations generally run against your device's local records; saved record rows are not routinely included in model prompts. Text you put into a prompt may itself contain personal information. Confirmed record changes are processed by the backend.
• Reminders and notifications. Personal reminder notes, dates, times, linked record identifiers, time-zone information, and device notification tokens are processed to sync reminders and notify signed-in devices. Notifications can show record or customer details on your lock screen depending on Android settings.
• Usage and subscription information. Account-scoped plan limits, usage counters, operation receipts, and, when purchases are enabled, Google Play purchase identifiers and subscription status are processed to provide plans and prevent duplicate or unauthorized operations. Payment-card details are handled by Google Play, not entered into Forma.
• Technical information. Release builds use Firebase Analytics and Crashlytics. These services process installation or app-instance identifiers, the Android advertising identifier where available, app interactions, approximate location such as city or country inferred from network information, device and operating-system information, crash reports, and diagnostics. Forma does not request access to precise GPS location. App Check / Play Integrity processes attestation information to protect the service. Server infrastructure also processes request metadata, such as IP addresses, for operation and security.

How the information is used

Information is used to sign you in, save and synchronize business records, apply business-specific access controls, provide AI features you request, deliver reminders, manage plans and usage, prevent abuse, diagnose failures, and understand how app features are used. The app does not include third-party advertising SDKs or an advertising feed.

Who can access information

People you invite to a business can access its content according to their assigned role. Share access and export files only with people you intend to receive the information. Customer information entered by a business is controlled by that business; contact the business owner about its use of your records.

Forma uses Google services, including Firebase Authentication, Cloud Firestore, Cloud Functions / Cloud Run, Cloud Messaging, App Check / Play Integrity, Analytics, Crashlytics, Vertex AI, and Google Play billing when enabled. These providers process information to deliver their services under their applicable terms. Google infrastructure may process information outside your country. See Firebase privacy and security and Google's privacy policy. The public policy and deletion pages are hosted by GitHub Pages, which processes website request information under GitHub's privacy statement.

Storage, security, and retention

Forma keeps an account-scoped local database in Android's private app storage for offline work and stores synchronized information in its cloud backend. Network connections use encryption in transit. Authentication and access rules protect cloud content. These measures do not make any service completely secure.

Business content remains available until deleted by an authorized person or removed through an applicable deletion request. Removing a field from a business can archive its existing values for recovery; it is not the same as erasing that content. Business deletion uses background cleanup. Some security, usage, operation-receipt, and purchase-verification records can remain after in-app account deletion; contact support to request review and deletion of associated data. Provider diagnostics, backups, or records required for security, legal, or transaction obligations may remain subject to the relevant retention requirements. This policy does not promise immediate removal from every backup.

Your choices and deletion

You can edit or delete records where your role permits, export business records, leave a team, and manage Android notification permissions. AI features are optional; prompts require an internet connection. Other features, including sign-in and synchronization, require their associated data processing.

To delete your account in the app, open Settings → Delete account and confirm. You may need to sign in again. First transfer ownership of, or delete, every business you own. Deletion removes your sign-in account and account profile/access references. Records in a business transferred to someone else are not automatically erased. Shared or exported copies held by others are outside the app's control.

You can also request account or associated-data deletion without the app through the Forma account and data deletion page. We may need to verify account ownership before acting on a request. Deleting an account does not itself cancel a Google Play subscription; manage it in Google Play.

Children

Forma is designed for adult business owners and team members. It is not designed for children. If you believe a child has supplied personal information, contact support.

Changes and contact

This policy may change when Forma's features or data practices change. The effective date above identifies the current version. For privacy questions or requests, email fawkesthepheonix240@gmail.com.