Privacy policy

How Formz accesses, uses, shares, protects, and deletes your Google data and other information.

Effective October 9, 2026. Formz for iPhone and Android is provided by Xanthous Tech LLC ("we"). This policy explains what Formz collects, how it is used, and the choices you have.

How Formz works

Formz is an editor for Google Forms. When you sign in with Google, Formz's server uses your permission to call Google's APIs on your behalf: to create and edit your forms, publish them, and read their responses. Your forms, responses, and Drive files stay in your Google account.

How Formz uses your Google data

This section describes the Google user data Formz accesses, and how it is used, shared, stored, protected, retained, and deleted.

Data Formz accesses

Formz asks for these Google permissions, and uses each one only for the purpose listed:

Your name, email address, and profile photo (openid, email, profile): to sign you in and show which Google account is connected. We store your Google account ID, name, email address, and profile photo address.
See, edit, create, and delete only the specific Google Drive files you use with Formz (drive.file): to list, search, and rename the forms you create in Formz, pick with Google's file picker, or open by link. Formz can't see the rest of your Drive.
See, edit, create, and delete your Google Forms forms (forms.body): to open, create, edit, and publish the forms you work on.
See all responses to your Google Forms forms (forms.responses.readonly): to show responses as charts and individual answers.

Google also issues access and refresh tokens when you sign in. Formz stores them so it can keep working with your forms until you sign out or delete your account.

How Formz uses Google data

Formz uses Google user data only to provide the features you use in the app: signing in, showing your forms, saving your edits, publishing and sharing forms, and showing responses. It reads and changes your forms only when you ask it to.

Formz is a form editor. It does not use AI or machine learning, and it does not generate images, video, or other media. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models, for advertising, or to build user profiles, and we do not sell it. People at Xanthous Tech LLC do not read your Google data unless you ask us to for support, it is needed for security, or the law requires it.

How Formz shares Google data

Formz does not share, sell, or transfer Google user data to third parties. Form content and responses go only between Google's APIs, Formz's server, and your phone. Formz's server runs on Cloudflare, which hosts it on our behalf and does not use the data for its own purposes. Your Google data is never sent to our analytics provider. We disclose information only if the law requires it.

How Formz stores and protects Google data

All traffic between your phone, Formz's server, and Google is encrypted with HTTPS (TLS). Formz's server does not keep copies of your forms or responses: they are retrieved from Google when you open them and sent to your phone. Our database stores only your account details, encrypted Google tokens, and the ID and title of forms you opened by link, so they stay in your form list. Access to production systems is limited to the people who operate Formz. On your phone, Formz keeps its sign-in session in the system's secure storage, and unsaved edits stay on your phone only until you save or leave the form.

Retention and deletion of Google data

We keep your Google account details, tokens, and saved form links only while your Formz account exists. When you delete your account in Settings → Delete account, Formz deletes them and asks Google to revoke Formz's access. You can also remove Formz's access at any time in your Google Account permissions. Deleting your Formz account does not delete forms, responses, or files in your Google account.

Google API Services User Data Policy

Formz's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Other information we process

To keep you signed in, our server stores a session with its creation and expiry times, IP address, and device type (user agent). Our hosting provider records operational logs of requests, such as IP address, time, and address requested, to run and secure the service. On your phone, Formz also remembers whether you have seen its tips.

Usage analytics

Formz uses PostHog to understand how the app is used and to improve it. It records app events (such as opening the app, screens viewed, which buttons are used, and actions like creating or publishing a form, with counts and error codes), along with your Formz account ID and device and app details such as model, operating system, app version, and language. It never records your email address, form titles, questions, or responses. Analytics data is linked to your Formz account ID, kept for up to one year, and we delete it on request.

Formz has no advertising or cross-app tracking. We do not sell your information or use it for advertising.

Service providers

Formz's server and database run on Cloudflare. Usage analytics are processed by PostHog. Sign-in and form features are provided by Google's APIs, whose use of your information is governed by Google's Privacy Policy. We share information with these providers only to operate Formz.

Retention and deletion

We keep your account information while your Formz account exists. Signing out ends the session on your phone. Expired sessions are removed.

Delete your account in Settings → Delete account. This deletes your Formz account, sessions, stored Google tokens, and saved form links, and asks Google to revoke Formz's access. If you can't use the app, email formz@x-tech.io from your account's email address and we will delete your account. Hosting logs and backups expire on their providers' schedules.