1. Information We Collect
FormDragon collects the following types of information to provide and improve our service:
- Account Information: Email address, name, and organization details when you create an account.
- Form Data: Data you enter into forms, including text, numbers, dates, and selections. This data is stored securely and belongs to your organization.
- Media Files: Photos, videos, audio recordings, signatures, and drawings captured through form submissions.
- Location Data: GPS coordinates when form fields request location capture. Location is only collected when you actively submit a form with a GPS field and grant permission.
- Device Information: Device model, operating system version, and app version for troubleshooting and compatibility.
2. How We Use Your Information
- To provide form building, data collection, and reporting services.
- To sync data between devices and the cloud.
- To send notifications about form assignments and approvals.
- To generate exports and reports from submitted data.
- To diagnose errors and improve app performance.
3. Data Storage and Security
Your data is stored on Supabase infrastructure (powered by PostgreSQL and AWS). We implement the following security measures:
- All data is transmitted over HTTPS/TLS encryption.
- Row-level security (RLS) policies ensure users only access data within their organization.
- Data at rest on our servers is encrypted by the hosting platform.
- Media files are stored in secure, access-controlled cloud storage.
4. Offline Data
The mobile app stores form data in a local database inside its own private storage, which your device's operating system encrypts along with the rest of the device. This enables offline data collection. Local data is synced to the cloud when connectivity is restored and can be cleared by uninstalling the app.
5. Third-Party Services
We use the following third-party services:
- Supabase: Database hosting and authentication.
- Sentry: Error monitoring and crash reporting (no personal data is sent).
- Google Sheets: Optional integration for data export (only when configured by your organization admin).
6. Data Retention and Deletion
Your organization controls its data. Organization admins can delete submissions, forms, and media at any time. Exported data (CSV, XLSX, PDF) downloaded to your device is not managed by our service.
Deleting your account
You can delete your account at any time from the mobile app, under Settings → Delete Account. If you do not have the app installed, email support@firedragontech.com from your account address and we will action the request.
When you delete your account:
- You can no longer sign in, and your access is revoked immediately.
- Your email address and avatar are removed from your profile, and any work still assigned to you is released back to your team.
- Forms you submitted are retained by your organization and remain attributed to your name. Submitted data is a record belonging to the organization that collected it, not to your personal account, so deleting your account does not erase it.
If you need submitted records themselves removed, contact your organization admin, who can delete individual submissions.
7. Children's Privacy
FormDragon is not intended for use by children under 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify users of significant changes via email or in-app notification.