Privacy Policy

Last updated: May 19, 2026

LeadForm ("we", "us", or "our") respects your privacy. LeadForm is a business productivity tool for creating shareable forms and link gates and viewing open and submission analytics. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile application, websites, and related services (together, the "Services"), including for account holders and, where relevant, individuals who interact with links our customers share.

Account and data deletion

This section applies to the LeadForm mobile app and related services operated under the LeadForm name on the Google Play Store and at leadform.app. It describes how you can request deletion of your account and associated personal data.

How to request deletion

In the LeadForm app (recommended): Sign in, open Settings, go to your account options, and choose Delete account. This permanently removes your account and associated data as described below.

By email: You may also email support@leadform.app from the address registered on your LeadForm account with the subject line Account deletion. If you no longer have access to that email, explain that in your message; we may ask for reasonable information to verify your identity before processing the request.

What we delete

After we verify your request, we delete or anonymize personal data tied to your account, including for example:

Your user profile and authentication record associated with the LeadForm app.
Form and link gate definitions, branding assets you uploaded (such as logos or cover images), recipient lists you added, and submission or gate response data stored under your account.
Push notification tokens associated with your account on our systems.

What we may retain and why

Legal and billing: Where required by law (for example tax, accounting, or fraud prevention), we may retain certain records for a limited period. Subscription or purchase records processed by Google Play or other payment providers may also be retained according to those platforms' policies.
Aggregates: We may retain de-identified or aggregated information that cannot reasonably be used to identify you.

Timing

We aim to complete verified deletion requests within 30 days. Complex requests may take longer; we will communicate if that applies.

1. Information we collect

We may collect the following categories of information:

Account data: email address, authentication identifiers (including sign-in with Google where you choose it), and profile details you provide when you register or sign in.
Content you create or receive through the Services: form and link gate definitions, branding assets (such as logos), optional recipient names and contact details you add, and responses submitted through forms or link gates you operate (which may include text, files, or signatures depending on how you configure fields).
Usage and analytics: app interactions (such as views and submissions), country or region inferred from IP address when someone opens a tracked link (we do not collect precise GPS location from the LeadForm app for this purpose), device type, and technical logs used to operate and secure the Services.
Notifications: if you enable push notifications, we process device tokens needed to deliver alerts you request (for example when a tracked link is opened or a form is submitted).
Purchase-related data: subscription and purchase status processed through Google Play and partners such as RevenueCat, according to their policies. We do not receive your full payment card details.
Public link visitors: when someone opens or submits a form or link gate you share, we may process information they enter and limited technical data (such as country or region and device type) so you can view analytics in your account. Those individuals should be informed by you, as the form owner, about how their data is collected.

2. How we use information

We use information to provide and improve the Services (including forms, link gates, sharing, and analytics), authenticate users, deliver notifications you opt into, understand how the Services are used, prevent abuse, comply with law, and send service-related notices. We do not use your data for third-party advertising based on activity across other companies' apps or sites.

3. Sharing of information

We may share information with service providers that help us operate the Services (such as Google Firebase for hosting and authentication, Google Play for purchases, RevenueCat for subscription management, Expo for push delivery, and IP-based geolocation services used on public form pages to derive country or region). Sharing is limited to what is needed for those purposes. We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and integrity of users and the public.

4. Data retention

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on data category and legal requirements.

5. Security

We implement technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure; we encourage strong passwords and device protections.

6. International transfers

Your information may be processed in countries other than your country of residence. Where required, we use appropriate safeguards for cross-border transfers consistent with applicable law.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is consent-based. Account holders may delete their account in-app via Settings as described in Account and data deletion. You may manage other preferences in-app or by contacting us. You can disable push notifications in device settings.

8. GDPR (European Economic Area, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies:

Controller: The data controller responsible for personal data processed through the Services is identified in product notices or may be reached at the contact email below.
Legal bases: We process personal data where necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests that are not overridden by your rights (such as secured service delivery and fraud prevention), or where you have given consent.
Your GDPR rights: You may request access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
Complaints: You have the right to lodge a complaint with a supervisory authority in your member state.
Automated decisions: We do not use solely automated decision-making that produces legal effects concerning you without human review in the Services described here.

9. Children's privacy

The Services are not directed to children under the age where parental consent is required in your jurisdiction. We do not knowingly collect personal information from children.

10. Third-party services

The Services rely on third parties including Google (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, and Google Play Billing), RevenueCat (subscription status), Expo (push notification delivery), and geolocation lookup services used on hosted form pages. Their handling of information is governed by their own privacy policies. We encourage you to review those policies if you use features that depend on them.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy with a new "Last updated" date and, where appropriate, provide additional notice.

12. Contact

For privacy-related requests or questions, contact us at support@leadform.app. To delete your account and associated data, follow Account and data deletion above.