AI Forms for Google Docs is an iOS app for creating and managing Google Forms. This policy
describes what the app and its companion service (gformsapps.app) store and why.
What we store
Short links you create — the link code, the Google Form URL it
points to, and your Google account identifier (so only you can see its analytics).
Visit analytics — when someone opens one of your links, we record
the visit with approximate location (country/region/city), device type, browser,
referrer, and the name of their internet provider (for example "Comcast"). All of
it is derived at our own edge network from the connection itself — no third-party
lookup service is involved. This describes your form's visitors, not you.
Quiz settings — timer, availability window, attempt limit, access
mode and proctoring rules you configure for a link.
Proctored quiz content — when you turn on proctoring, the app
sends your form's questions, answer options and theme to gformsapps.app so the
quiz page can show them. Correct answers are not sent. This copy is kept only
while the quiz exists and is deleted with it.
Quiz-taker records (proctored quizzes only) — see
"Proctored quizzes" below.
Subscription status — the identifier Apple assigns to your
subscription and whether it is active, so links keep working while you are
subscribed.
What we never store
Your Google Forms and their responses — those stay in your Google account, and the
app talks to Google's APIs directly from your device. The one exception is the
question text of a quiz you choose to proctor (above). On a proctored quiz,
answers pass through gformsapps.app on their way to your Google Form and are not
kept by us.
Your Google password or long-lived credentials. Sign-in uses Google Sign-In;
tokens stay on your device.
Advertising identifiers (IDFA). There are no ads and no advertising trackers,
and we do not track you across other companies' apps or websites.
Visitors' IP addresses. Approximate location and network
provider are derived from the connection at our edge, and the address itself is
never written to our database.
Proctored quizzes
If a form's owner turns on proctoring, the people taking the quiz ("quiz-takers") use
a gformsapps.app page, and we store the following on the owner's behalf. The quiz page
lists the monitoring rules in force, and the quiz-taker must acknowledge them before
starting.
Identity — depending on the access mode the owner chose: the
email address the quiz-taker entered and proved by opening the personal link we
emailed them, and, if the owner requires it, their name and verified email from
Sign in with Google (we request only the basic
openid, email and profile scopes, and keep
only the email address). On quizzes without either, a random identifier stored in
a browser cookie.
The attempt — when it was started and submitted, whether it was
submitted automatically at time-up, page reloads, and moving the attempt to
another device.
Monitored activity — only for the rules the owner turned on, and
only while the quiz is open: switching to another tab, window or app (and for how
long); attempts to copy, cut, paste or print; right-click; leaving fullscreen;
opening developer tools. For pastes we record how many characters were pasted and
into which question — never the pasted text. We do not record keystrokes,
screens, the camera or the microphone.
Approximate location and device — as described under visit
analytics above.
This information is shown only to the quiz's owner, in the app, to help them review
the attempt. Quiz-takers' answers are submitted to the owner's Google Form and are not
stored by us. Personal-link emails are sent through our email provider, Resend, which
receives only the recipient address and the message.
The quiz's owner decides how this information is used. Quiz-takers who want a record
corrected or deleted should contact the owner; owners can delete any individual attempt
in the app, or delete the whole quiz.
How long we keep it
Visit records, quiz content and quiz-taker records are kept until the owner deletes
the attempt, the quiz link, or their account, at which point they are removed from our
servers immediately. We do not currently apply an automatic expiry, so a link you leave
in place keeps its history until you remove it. IP addresses are never stored.
Google API access and Limited Use
To let you work with your Google Forms, AI Forms for Google Docs requests access to the following,
and uses each only to provide the feature you ask for in the app:
Google Forms — create and edit your forms and their questions,
and open or close a form for responses (including scheduled open/close and
response limits).
Google Drive — list your forms, share them with people you
choose, move them to Trash, and open the files you select. This uses the full
Google Drive scope (https://www.googleapis.com/auth/drive), which
can reach the files in your Google Drive. The app uses that access only for the
actions listed here, and only when you ask for them.
Google Sheets — link or create a spreadsheet as a form's
response destination when you choose to.
Google Slides — generate a response-summary presentation when
you tap "Export to Slides".
Apps Script — run a helper script, as you, to apply form
settings the public Forms API can't set.
Your forms and their content are accessed directly from your device and are
not stored on our servers, with one exception you control: when you
proctor a quiz, its questions are stored on gformsapps.app solely to show that quiz to
the people taking it, and are deleted when you delete the quiz.
No Google forms data is collected and/or shared with any 3rd party
application.
AI Forms for Google Docs's use of information received from Google APIs adheres to the
Google API
Services User Data Policy, including the Limited Use requirements.
We do not transfer or sell this data, do not use it for advertising, and do not allow
humans to read it, except as necessary for security purposes, to comply with applicable
law, or as part of a feature you explicitly request.
AI features
Some features are powered by AI: generating a form from your description or an imported
file (photo, PDF, document, or link), and summarizing your form's responses. When you use
these features, only the relevant content — your prompt, the file you import, or the
responses you choose to summarize — is sent to Google's Gemini models via Google
Vertex AI (Google Cloud) to produce the result and return it to you.
This content is processed solely to provide the feature you requested
and is returned to your device; it is not stored on our servers.
In accordance with Google Cloud's Vertex AI terms, your prompts and the responses you
submit are not used to train or improve Google's — or anyone else's — foundation
or generalized AI/ML models.
We do not use any third-party (non-Google) AI service, and we never
transfer your Google Workspace or Google Photos data — raw, aggregated, anonymized, or
derived — to any third party to create, train, or improve AI/ML models, or for
aggregation or resale.
Encryption in transit — all communication between the app, Google's
APIs, Google Vertex AI, and our companion service (gformsapps.app) is encrypted using
HTTPS/TLS.
Protection of stored data — the limited data we store is held on
Google Cloud / Cloudflare infrastructure, encrypted at rest, and safeguarded with
strong encryption and hashing where applicable.
Data minimization — we hold as little as possible: your Google
Forms and their responses stay in your Google account and are not copied to our
servers. Where a Google scope grants broader access than a feature strictly needs,
the app still only reads or changes the files you act on.
Sensitive data — form responses may contain personal or sensitive
information. Such content is transmitted only over encrypted connections, is processed
solely to deliver the feature you request (for example, an AI summary via Google
Vertex AI), and is not retained by us for training or any secondary purpose.
Access controls — the limited data we do store (short links, visit
analytics, quiz settings and quiz-taker records) is protected by access controls and
tied to your Google account identifier so only you can access it. Sign-in tokens
remain on your device and are never stored on our servers; a quiz-taker's Google
sign-in is verified once and only their email address is kept.
Retention and deletion — you can delete everything we store at any
time (see "Deleting your data" below).
Analytics and diagnostics
To understand how the app is used and to improve it, the app uses
Google Firebase Analytics and Firebase Crashlytics.
These collect usage and diagnostic information:
App interaction events — for example, signing in, creating a form, viewing the
upgrade screen, starting or completing a purchase, and exporting responses —
plus general device and app information (device model, OS version, app version,
language, and a randomly generated app-instance identifier).
Crash and performance data, if the app encounters an error.
This information is aggregated and pseudonymous, and it never includes the content
of your Google Forms or their responses. We do not use advertising identifiers (IDFA)
and do not track you across other apps or websites. Purchases are processed by Apple —
we receive confirmation that a purchase occurred but never your payment-card details.
Analytics and diagnostic data are processed by Google on our behalf; see Google's
Privacy Policy at policies.google.com/privacy.
Deleting your data
Settings → Delete Account removes every record listed above from our servers
immediately, including your quizzes' content and all quiz-taker records. Deleting a form
in the app removes its link, quiz and quiz-taker records. Your Google Forms are not
affected.