1. Scope
This Policy applies to information collected from users of the Service, including account holders, administrators, and end users, and to information collected through the App.
The App may be used independently of the Service. FormShare Collect allows you to connect to a server of your choosing, which may be a FormShare server operated by QLands, a FormShare server that you or your organization self-host, or a third-party server that is not operated by or affiliated with QLands (a compatible OpenRosa server).
Where the App is configured to connect to a server not operated by QLands, the data you collect is stored on your device and transmitted directly from your device to that server. QLands does not receive, store, process, or have access to that data. The organization operating that server, and not QLands, is responsible for that data and for the privacy practices that apply to it. You should consult the privacy policy of that server's operator.
2. Information We Collect Through the Service
We may collect:
- Account Information: Name, organization, email address, billing details, and contact information.
- Service Data: Forms, submissions, metadata, and other content uploaded to or generated through the Service.
- Usage Information: Logs, access times, and actions taken within the Service.
- Device and Connection Information: IP addresses and browser type.
We do not intentionally collect sensitive personal data unless required to provide the Service and authorized by you.
We do not collect any payment information, such as credit card information. All payments are handled by Stripe.
3. Information We Collect Through the App
3.1 Data You Collect in Forms
Form definitions, submissions, attachments (such as photographs, audio recordings, and location coordinates captured as part of a form), and related metadata are stored locally on your device and transmitted to the server you configure. Where that server is not operated by QLands, QLands does not receive this data. See Section 1.
3.2 Device Permissions
The App requests access to certain device features only where a form or App function requires them, and only with your permission. These may include the camera, microphone, photo library, location services, files, and local notifications. Information obtained through these permissions is used solely to provide the data-collection functionality you have requested. We do not use information obtained through these permissions for advertising, marketing, or user profiling, and we do not share it with data brokers or advertising platforms. You may revoke any of these permissions at any time in your device settings (for example, iOS Settings or Android Settings).
3.3 Optional Analytics
With your prior consent, the App may collect limited, aggregate analytics to help us understand how the App is used and to improve it. Where enabled, this consists of:
- Whether the configured server is a FormShare server (a yes/no indicator), and
- Basic non-identifying app and event information, such as App version and crash diagnostics.
We do not transmit the address, hostname, or URL of the server you configure. The yes/no indicator described above is derived on your device, and the underlying server address never leaves your device.
We do not use any permanent, device-based identifier, or any data derived from your device, to uniquely identify you or your device. Analytics are reported in aggregate.
Where enabled, this analytics and crash reporting is provided by Google Firebase (Firebase Analytics and Firebase Crashlytics), acting as our processor.
Analytics are off by default and are collected only if you opt in. You may withdraw your consent at any time in the App's settings, and we will promptly cease the collection and use of such data. We will not broaden or change the scope of use of previously collected data without obtaining your prior consent.
3.4 Advertising
The App does not display third-party advertising and does not use device advertising identifiers (such as Apple's IDFA or the Android Advertising ID) for advertising or to track you across apps or websites operated by other companies. If we introduce advertising in the future, we will update this Policy and, on iOS, request your permission through the App Tracking Transparency prompt before using the IDFA, and on Android, comply with Google Play's advertising-ID requirements, before any such tracking.
4. How We Use Information
We use information to:
- Provide, maintain, and improve the Service and the App;
- Authenticate users and secure accounts;
- Provide support and communicate with users;
- Comply with legal obligations.
5. Data Sharing
We do not sell personal data. We may share information with:
- Service providers acting on our behalf. We share your name and email address with Stripe for the purpose of payment.
- Analytics and crash-reporting providers. Where you have opted in (Section 3.3), Google (Firebase Analytics and Crashlytics) processes aggregate app-usage and crash-diagnostic information on our behalf.
- Third-party integrations enabled by you;
- Authorities when required by law.
We do not share user or device data with data brokers or advertising platforms.
6. Third-Party Components
The App may include third-party software components and software development kits (SDKs). Where such components collect or process data, we disclose that collection in this Policy and in the App's privacy disclosures on the applicable app store — including the App Store privacy information (Apple) and the Data safety section (Google Play) — and we require such components to comply with applicable requirements, including the provision of accurate privacy manifests, SDK declarations, and required metadata.
7. Data Security
We implement reasonable technical and organizational measures to protect data. No method of transmission or storage is completely secure.
8. Data Breach Notification
In the event of a data breach in which personal data that we collect through the Service or the App is compromised, we will notify affected users in accordance with applicable law.
9. Data Location
Data may be stored and processed in the United States or other jurisdictions where QLands or its service providers operate. Data collected through the App and transmitted to a server not operated by QLands is stored in the location determined by that server's operator.
10. Data Retention and Deletion
We retain data for as long as necessary to provide the Service or as required by law.
You may request deletion of your account and associated data at any time, including from within the App and the Service, or by emailing privacy@qlands.com, subject to legal obligations. You may also delete locally stored data from your device at any time by deleting it in the App or by removing the App.
11. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. Where the App is connected to a server not operated by QLands, requests concerning data held on that server should be directed to its operator.
12. Children's Data
The App and the Service are not directed to children, and we do not knowingly collect personal data from children through the App or the Service.
Data-collection projects run using the App or the Service may involve collecting information about minors (for example, in household or health surveys). You are solely responsible for obtaining all appropriate consents and approvals, including from parents or guardians and any applicable ethical review body, before collecting data about minors, and for complying with all applicable child protection and data protection laws.
13. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service, the App, or by email.
14. Contact
Questions or requests regarding this Privacy Policy may be sent to privacy@qlands.com.
QLands Software Inc.
Reading, PA, USA