Privacy Policy

Privacy Policy for AI Form for Google Docs (FormsGen)

Effective Date: October 10, 2025

Last Updated: October 14, 2026

This version describes version 2.1 of the app.

I. Introduction and Scope of This Policy

Purpose and Agreement

This Privacy Policy (“Policy”) describes how Nice Express (“we,” “us,” or “our”) collects, uses, shares, and protects information in connection with your use of our iOS application, AI Form for Google Docs (formerly AI Form Builder & Survey Maker), also called FormsGen (bundle identifier com.formsgen.formsforgoogleforms) (the “Service”). This Policy is a legally binding agreement between you (“user” or “you”) and us. By downloading, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described in this Policy, you must not use the Service. The Service creates and manages Google Forms in your own Google account: from a text description with the help of AI, from a photographed paper questionnaire, or by hand. This Policy explains what information is involved in each of those features.

Key Definitions

• Personal Data: Any information that relates to an identified or identifiable individual, such as your name, email address, or account identifier.

• Usage Data: Information collected automatically through the operation of the Service, such as the app features used, crash logs, device model and operating system version.

• Google User Data: Any data accessed from your Google Account via Google’s Application Programming Interfaces (APIs), including your basic profile information and the Google Forms and Google Drive files the Service creates or opens on your behalf.

• Service Provider: A third-party company employed by us to facilitate the Service, provide the Service on our behalf, or assist us in analyzing how our Service is used.

Accessibility

This Privacy Policy is accessible via a direct link within the Service’s settings and is published on our website at formsgen.com/privacy-policy. The Service is distributed through the Apple App Store: apps.apple.com/us/app/ai-form-for-google-docs/id6741689995.

II. Our Commitment to Platform Compliance and User Trust

The Service integrates with third-party platforms that have established rules to protect user data. Our data collection, usage, storage, and sharing practices are designed to be in strict accordance with the following policies:

• The Google API Services User Data Policy: We adhere to this policy, with particular attention to the Limited Use requirements applicable to the sensitive and restricted scopes our Service utilizes. This governs all Google User Data we access and is the cornerstone of our data handling for the Service’s core features.

• Advertising: The app contains no advertising.

• The Apple Developer Program License Agreement and App Store Review Guidelines: We uphold Apple’s guidelines pertaining to user privacy, data collection and storage, in-app purchases, and the App Privacy details published on the App Store listing. This Policy is consistent with those details.

III. The Information We Collect

The following table summarizes the categories of data involved in the Service, the purpose of each, who receives it, and whether it is linked to your identity. It is consistent with the App Privacy details declared on the App Store.

Apart from the AI response analysis described in section B, your forms, responses and images are not in this table because we do not collect them: they are stored in your own Google account, as explained in section A below.

A. Information Accessed via Google APIs (With Your Explicit Consent)

Access to your Google Account is granted only after you provide explicit consent through Google’s standard OAuth 2.0 screen, which lists the permissions the Service requests. We request only the permissions necessary to deliver the features of the Service.

• Sign-in: The Service uses Google Sign-In only. When you sign in, we receive your name, email address and Google user ID. We never see your password.

• Google Forms scope (forms.body): Allows the Service to create Google Forms in your account and to edit the forms it manages: questions, settings, and the “accepting responses” state. All form creation and modification is initiated by you.

• Google Drive scope (drive.file): Limited to files the Service itself creates or that you open with it. It is used to store your forms in your Drive, to upload images you add to questions into a folder named “Forms Gen Images” in your Drive, and to create a Google Sheets spreadsheet when you export responses. The Service cannot see or browse the rest of your Drive.

Where your data lives: Your forms, their responses and the images added to questions live in your own Google account (Google Forms and Google Drive). We do not store form or response data on our servers.

B. AI Form Generation

When you use the “Create with AI” screen, the text you type and the options you pick (form type, number of questions, language, tone) are sent by the app to Google’s Generative Language API (Gemini) to generate the questions. The request is not linked to your identity or your Google account. The generated questions are shown to you before any form is created, and nothing is written to your Google account until you confirm. We do not store your prompts. AI processing within the Service is limited to the specific tasks you request: generating a form, and, if you ask for it, analysing a form’s responses as described below.

AI response analysis

The app can also analyse a form’s responses with AI. This runs only when you tap “Analyze responses” in a form’s Responses tab and accept a consent screen, which is shown before the first analysis.

• What is sent: the form’s title, the text of its questions, the answer counts and averages computed by the app for choice, scale, rating and grid questions, and the text of free-text answers, are sent to Google’s Generative Language API (Gemini). Free-text answers are limited to 300 answers per question and about 60,000 characters in total; beyond that, an evenly spread sample of the answers is sent.

• What is never sent: respondents’ email addresses (when the form collects them), response IDs, submission times, uploaded files, and answers to date and time questions. Email addresses and phone numbers written inside answers are replaced by [email] and [phone] before sending.

• Identity and storage: the request is not linked to your identity or your Google account. We do not store responses or analyses on our servers.

• On your device: the analysis is saved only on your device, excluded from iCloud backups, and deleted when you sign out or delete your account.

• Google API Services User Data Policy: this transfer of Google Forms data happens only for this user-facing feature and with your consent, in line with the Google API Services User Data Policy, including the Limited Use requirements.

• Analytics: an “ai_analyze” event records a range of response counts (for example 20–99), the app language, whether the analysis succeeded or the type of failure, and its duration. It never contains form content, titles, questions or answers.

C. Paper Questionnaire Scanning and Photos

The Service can turn a photographed paper questionnaire into a form. Photos you take or pick from your photo library are analysed on your device with Apple’s Vision text recognition. The photo is never uploaded to us or stored by us; only the text you choose to keep becomes a form in your Google account.

The app asks for camera and photo library permission only for this feature and for adding images to questions. It asks for permission to add to Photos when you save a QR code image. You can revoke these permissions at any time in iOS Settings; the corresponding features will then be unavailable.

D. Advertising and Apple Ads Attribution

Since version 2.1, the app shows no advertisements and contains no advertising SDK. Earlier versions (2.0 and 2.0.1) showed ads to free users through Google AdMob; that SDK has been removed, and users of those versions stop seeing ads once they update.

To measure our own Apple Ads campaigns, the app asks Apple’s AdServices framework, once per install, for an attribution token and sends it to Apple. Apple returns the identifiers of the campaign, ad group and keyword that led to the download, which we record in Firebase Analytics. This does not use the advertising identifier, does not involve personal data and is not tracking; it does not require App Tracking Transparency.

E. Information for Purchases (via the Apple App Store)

Weekly and yearly subscriptions and the lifetime purchase go through Apple’s App Store (StoreKit). Your payment details (card number, billing address) are provided to Apple; we do not collect, access, process or store them. After a purchase, we receive the purchase status (product purchased, purchase and expiration dates) needed to unlock premium features. Your subscription status is stored in Firebase Realtime Database against your account ID.

F. Usage, Diagnostics and Analytics (via Firebase)

We use Firebase Analytics to record product events, for example: onboarding completed, form created, AI generation used, form shared, purchase started, together with a “membership status” property (free, trial or premium), and an “ai_analyze” event for AI response analysis, described in section B. These events carry no form content, no responses and no email address. Firebase Crashlytics collects crash reports and diagnostics (device model, operating system version, the state of the app at the time of a crash) so that we can identify and fix bugs.

G. Support Communications

If you contact us for support or to provide feedback, we collect the information you include in your message, such as your name, email address and the content of your message, in order to respond.

IV. How and Why We Use Your Information (Purpose Limitation)

We only use the information we collect for the specific, explicit, and legitimate purposes below, and we will not process your data in a manner that is incompatible with them.

A. To Provide, Maintain, and Operate the Service

All Google User Data accessed from your Google Forms and Google Drive is used exclusively to power the core, user-facing features of the Service: creating, editing, sharing and managing Google Forms and reading their responses. This use is in direct compliance with Google’s Limited Use policy, which mandates that data from sensitive scopes must be used to provide or improve prominent features that are visible in the application’s user interface. In particular:

• Exports: CSV, Excel and PDF files are generated on your device and handed to the iOS share sheet; we do not receive them. Google Sheets export creates a spreadsheet in your own Google Drive.

• Automatic closing (optional): If you set a response limit or a closing date on a form, the app checks it when opened and, when iOS allows, during Background App Refresh, and turns off “accepting responses” on your own form when the limit or date is reached. Nothing is collected in the process.

B. To Measure Our Own Advertising (Apple Ads)

We use the Apple Ads attribution described in section III.D only to know which Apple Ads keywords bring downloads of the app.

The core architecture of our Service is built upon a strict separation between the sensitive data required for its primary function and the data used for advertising. Google’s API policy is unequivocal: data obtained via sensitive scopes such as drive.file and forms.body cannot be used for serving advertisements. Therefore, we make the following explicit declaration of our “Data Firewall”: The information we access from your Google Drive and Google Forms is never, under any circumstances, used to serve, target, measure, or personalize advertisements. A strict technical and organizational separation is maintained between data processed for the core functionality of our Service and data collected for advertising purposes. This is not merely a policy statement but a reflection of our system’s design, ensuring that your personal and potentially sensitive content is completely isolated from our advertising data streams.

C. To Manage Your Account and Process Purchases

We use your Google account information to create and secure your user account. For purchasers, we use the purchase status received from Apple to grant access to premium features and handle billing-related inquiries.

D. To Communicate With You

We may use your email address to respond to your support requests, send important updates about the Service (such as changes to this Policy), and provide security notices.

E. To Improve Our Service

We use the Firebase Analytics events and Crashlytics reports described above to understand which features are used, identify areas for improvement, troubleshoot issues and fix bugs.

V. How We Share and Disclose Your Information

We do not sell your Personal Data. We only share your information with third parties in the specific circumstances outlined below.

A. With Service Providers

We use Firebase (Google) for analytics, crash reporting, and to store subscription status against your account ID. Service Providers are granted access to your information only to the extent necessary to perform these tasks on our behalf.

B. With Google

• For Google API functionality: When you create, edit or share a Google Form, add an image to a question, or export responses to Google Sheets through the Service, the relevant data is transmitted to Google’s Forms and Drive APIs to execute that action in your own account.

• For AI form generation: The text and options you enter in “Create with AI” are sent to Google’s Generative Language API to generate the questions, without your identity or Google account attached.

• For AI response analysis: Only when you tap “Analyze responses” and accept the consent screen, the form data listed in section III.B is sent to Google’s Generative Language API, without your identity or Google account attached.

C. With Apple

For in-app purchases, transaction details are handled by Apple’s App Store infrastructure; we receive the purchase status described above.

Apple Ads attribution: the AdServices attribution token is sent to Apple, which returns campaign identifiers (see III.D).

D. For Legal Reasons and to Protect Our Rights

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, such as a subpoena, court order, or other lawful request by public authorities.

• Enforce our Terms of Service or other agreements.

• Protect and defend the rights, property, or safety of our company, our users, or the public.

• Detect, prevent, or otherwise address fraud, security, or technical issues.

E. In Case of a Business Transfer

If we are involved in a merger, acquisition, divestiture, restructuring, or sale of all or a portion of our assets, your Personal Data may be transferred as part of that transaction. We will provide you with notice before your Personal Data is transferred and becomes subject to a different privacy policy, in accordance with applicable platform requirements.

VI. Google API Services: Specific Disclosures and Limited Use

This section provides specific, prominent disclosures required to comply with Google’s policies for applications that use sensitive or restricted API scopes. Our adherence to these rules is a prerequisite for the Service’s access to Google User Data and is subject to verification by Google. We hereby affirm that our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In accordance with this policy, we make the following commitments regarding any Google User Data accessed through the drive.file and forms.body scopes:

• Purpose Limitation: We will only use restricted scope data to provide or improve the prominent, user-facing features of the Service as described in this Policy (i.e., AI-powered Google Form generation and management). The data will not be used for any hidden features or purposes not clearly disclosed to you.

• Prohibition on Data Transfer: We will not transfer Google User Data to any other party, except when it is:

  • Necessary to provide or improve the core user-facing features of the Service.

  • Necessary for security purposes, such as investigating abuse.

  • Necessary to comply with applicable laws or a binding legal order.

  • Part of a merger, acquisition, or sale of our assets, but only after obtaining your explicit prior consent.

• Prohibition on Advertising Use: We will never use or transfer any Google User Data for serving advertisements. This includes, but is not limited to, personalized advertising, retargeting, or interest-based advertising. This is a strict and absolute prohibition.

• Prohibition on Human Access: We will not allow any human to read your Google User Data. The only exceptions to this rule are if:

  • We have obtained your affirmative, explicit consent to view specific data (for example, to resolve a support issue you have reported).

  • It is necessary for security purposes (such as investigating a bug or abuse).

  • It is necessary to comply with applicable law.

  • The data is aggregated and anonymized and used for internal operations in accordance with applicable privacy laws.

• Prohibition on AI Model Training: We explicitly state that we do not use any user data obtained through Google Workspace APIs (including data from Google Drive and Google Forms) to develop, improve, or train any generalized artificial intelligence and/or machine learning models. The AI processing within our Service is limited to executing the specific form-generation and response-analysis tasks you request.

VII. Data Security, Integrity, and Retention

Security Measures

• Encryption in Transit: All data transmitted between your device and Google’s APIs, Firebase and our other Service Providers is encrypted using industry-standard Transport Layer Security (TLS).

• Access Controls: We limit access to Personal Data to the people who have a legitimate business need to know that information, and they are subject to confidentiality obligations.

• On-device processing: Paper questionnaire recognition and file exports run on your device; the photos and exported files never pass through our servers.

Data Retention

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Google User Data: We do not permanently store the content of your Google Drive files or Google Forms on our servers. Data is accessed via the APIs in real-time to perform user-initiated tasks. Any data that is temporarily cached to improve performance is retained only for the duration necessary to complete that task and is then securely deleted.

• AI prompts and photos: Not stored by us. Prompts are sent to the Generative Language API to generate your questions and are not retained on our side; photos never leave your device.

• AI response analyses: We do not store responses or analyses on our servers. An analysis is saved only on your device, excluded from iCloud backups, and deleted when you sign out or delete your account.

• Account Information: We retain your account information (name, email, user ID, subscription status) for as long as your account remains active. If you delete your account, this information is deleted in accordance with our data deletion procedures.

• Usage and Transaction Data: Analytics and crash data are retained by Firebase according to its retention settings. Transaction data related to your purchases is retained for the period required by financial and tax regulations.

VIII. Your Privacy Rights and Choices

A. Accessing and Managing Your Data

• Google Account Permissions: You can review, manage, or revoke the permissions you have granted to our Service at any time through the “Third-party apps with account access” section of your Google Account security settings. Revoking permission will limit or disable the functionality of the Service. Your forms remain in your Google account.

• Device Permissions: Camera, photo library and Photos access can be changed at any time in iOS Settings for the app.

B. Data Deletion

You have the right to request the deletion of your account and the Personal Data associated with it. You can delete your account directly from the app’s settings, which removes the account data we hold, or you can request deletion by contacting us through the channels in the “How to Contact Us” section below. Upon receiving and verifying your request, we will delete your data, subject to any legal or regulatory retention requirements. Deleting your account does not delete the forms in your Google account; those remain yours and can be managed in Google Forms and Google Drive.

C. Advertising and Tracking

The app shows no advertisements. It does not track you across other companies’ apps or websites and does not use the advertising identifier, so it does not ask for App Tracking Transparency permission. Apple Ads attribution (see III.D) is the only advertising-related measurement and does not identify you.

D. Regional Privacy Rights (e.g., GDPR, CCPA/CPRA)

If you are a resident of the European Economic Area (EEA), the United Kingdom, California, or another jurisdiction with applicable data protection laws, you may have additional rights, which can include:

• The right to access: The right to be informed of and request access to the Personal Data we process about you.

• The right to rectification: The right to request that we amend or update your Personal Data where it is inaccurate or incomplete.

• The right to erasure (the right to be forgotten): The right to request that we delete your Personal Data.

• The right to restrict processing: The right to request that we temporarily or permanently stop processing all or some of your Personal Data.

• The right to object: The right to object to us processing your Personal Data.

• The right to data portability: The right to request a copy of your Personal Data in an electronic format. To exercise any of these rights, please contact us using the details provided below.

IX. Children’s Privacy

The Service is not directed at children under the age of 13 (or any higher age threshold required by applicable law in your jurisdiction). We do not knowingly collect Personal Data from children. If we become aware that we have inadvertently collected Personal Data from a child without verification of parental consent, we will take steps to delete that information as quickly as possible. If you are a parent or guardian and you believe that your child has provided us with Personal Data, please contact us so that we can take necessary action.

X. International Data Transfers

Our Service is operated globally. If you are using the Service from outside the United States, please be aware that your information, including Personal Data, may be transferred to, stored, and processed in the United States and other countries where our Service Providers (Google, Firebase, Apple) are located. The data protection laws of these countries may differ from those of your country of residence. By using the Service, you consent to the transfer of your information as described in this Privacy Policy.

XI. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this Policy. If we make a material change, we will provide you with notice through the Service or by other means, such as email, to provide you with the opportunity to review the changes before they become effective. If we ever change the way our application accesses, uses, stores, or shares Google User Data, we will notify you and prompt you to consent to an updated Privacy Policy before we implement such changes, as required by the Google API Services User Data Policy. Your continued use of the Service after any changes to this Privacy Policy shall indicate your agreement with the revised Privacy Policy.

XII. How to Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us. You can reach our privacy team at:
Nice Express
Attn: Privacy Officer
Email: contact@formsgen.com
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.