1. Who we are
FormiFox (“we”, “us”, “our”) is a file-conversion app for iOS and Android. This policy explains what data we handle when you use the app and the FormiFox website at formifox.com.
For privacy questions, write to info@formifox.com.
2. What stays on your device
All on-device conversions — images (JPG/PNG/HEIC/WebP), basic PDF operations (merge, compress, extract images), scanning, cropping, resizing, rotating — run entirely on your phone. The source files, output files, and your conversion history are stored locally (Hive + iOS app sandbox).
- We do not upload these files.
- We do not see the file names or contents.
- You can clear local history from Settings → Clear Cache at any time.
3. Cloud conversions
Some conversions require server processing (e.g. Word↔PDF, background removal, object erasing, OCR). For these, the input file is uploaded over HTTPS to Firebase Storage and processed by our Cloud Functions and Cloud Run services.
- You must be signed in (Apple, Google, or email) to use cloud features.
-
Files are stored in your private Storage folder
(
jobs/<userId>/<jobId>/) and never accessible to other users. - Results are downloaded to your device. Your app stores your 10 most recent jobs in your local history. We do not retain copies of your files.
4. Account data
If you sign in we store the minimum required: a Firebase user ID, your email (for password / Apple / Google providers), your display name if you provided one, your subscription plan, and your monthly and daily conversion counters used to enforce free-tier limits.
5. Subscriptions & purchases
Subscriptions are handled by Apple App Store and Google Play through RevenueCat. We receive the entitlement status (Pro / Free) and a pseudonymous purchase identifier. We do not receive your payment details, credit-card number, or billing address.
6. Analytics & diagnostics
FormiFox uses Firebase Crashlytics and Firebase Analytics to detect crashes and understand which features are used. These send a device identifier, OS version, app version, and event names — never file contents or personal data. You can opt out from Settings → Privacy.
7. Advertising
FormiFox does not display third-party advertisements. We do not integrate any ad SDK, do not share your identifiers with ad networks, and do not perform cross-app tracking. No App Tracking Transparency prompt is shown because no tracking occurs.
8. Sharing & third parties
We share data only with the providers strictly needed to operate the app:
- Firebase / Google Cloud — Auth, Storage, Firestore, Functions, Crashlytics, Analytics
- RevenueCat — subscription management
- Apple / Google — sign-in, App Store / Play Store billing
We never sell or rent your personal data.
9. Your rights
You can access, export, or delete your account and all associated data at any time from Settings → Delete Account. The action removes the Firebase user record, usage counters, and any cloud-job files.
Depending on your jurisdiction you also have the right to:
- Access & portability — request a copy of data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your personal data.
- Restriction — ask us to stop processing while a dispute is resolved.
- Object — object to processing based on legitimate interests.
- Lodge a complaint — contact your local data-protection authority (EU/EEA: your national DPA; UK: ICO; Turkey: KVKK Board; US/California: California AG).
To exercise any right, email info@formifox.com or use the in-app Settings → Delete Account flow. We will respond within 30 days.
9a. Turkey — KVKK Compliance
For users in the Republic of Türkiye, FormiFox acts as the veri sorumlusu (data controller) under Law No. 6698 on the Protection of Personal Data (KVKK). Processing is carried out on the following legal bases (Article 5):
- Performance of the service contract (account creation, cloud conversions).
- Legitimate interest in operating a safe and reliable service (crash analytics, abuse prevention).
- Compliance with a legal obligation where applicable.
Under KVKK Article 11 you have the right to: learn whether your data is processed; request information about it; learn its purpose and whether it is used appropriately; know third parties to whom it is transferred; request correction of incomplete or inaccurate data; request deletion or destruction; object to processing that produces adverse consequences; and seek compensation for damages arising from unlawful processing.
You may exercise these rights by writing to info@formifox.com. If your request is not resolved, you may apply to the Kişisel Verileri Koruma Kurulu (KVKK Board) at kvkk.gov.tr.
9b. EU/EEA — GDPR legal bases
We process personal data under the following GDPR legal bases (Article 6):
- Contract (Art. 6(1)(b)) — account creation, cloud job processing, subscription management.
- Legitimate interests (Art. 6(1)(f)) — crash diagnostics, fraud prevention, service security.
- Legal obligation (Art. 6(1)(c)) — where required by applicable law.
You may withdraw consent at any time where processing is consent-based (e.g. optional analytics), without affecting prior processing. EU/EEA users may lodge a complaint with their national supervisory authority.
10. Children
FormiFox is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children.
11. International transfers
Firebase servers are operated by Google in multiple regions (primarily
us-central1). By using the app you consent to processing in
those locations.
12. Changes to this policy
We may update this policy as the product evolves. We will notify users of material changes inside the app or by email.
13. Contact & data controller
Data controller: FormiFox (formifox.com)
Privacy enquiries: info@formifox.com
General support: support page
We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response you may contact the relevant supervisory authority for your jurisdiction (see Section 9 above).