KivoformPrivacy policy
This page explains what data the Kivoform app, its online forms, and this website handle, why, how long it’s kept, and how to exercise your rights.
1. Who is responsible
Kivoform is published by Jeff Demanou (see the legal notice). For any question about your data, write to contact@kivoform.com.
For your account and form data, Kivoform is the data controller. For the responses people send to a form, the controller is the person who created that form, and Kivoform acts as their processor.
2. Data from people who create forms
| Data | What it’s used for |
|---|---|
| Anonymous account identifier, created the first time you open the app | Getting your forms and responses back. It isn’t linked to any identity. |
| Session tokens | Keeping you signed in. On the iPhone they’re stored in the keychain, and the server only keeps a fingerprint of them. |
| App-specific Apple identifier, if you choose Sign in with Apple | Getting your account back on another iPhone. Neither your name nor your email address is requested. |
| Forms, questions, themes, and uploaded images | Providing the service and displaying your forms. |
| Subscription information (plan, end date, status, Apple transaction identifier) | Turning on the features of your plan. Payment is handled by Apple, and Kivoform receives no banking data. |
| Device notification token, if you turn on notifications | Letting you know about each new response. You can turn this off at any time on the Account screen. |
| Result of an Apple device check (DeviceCheck) | Limiting the creation of throwaway accounts. Only a counter and a flag are kept. If many anonymous accounts have been created from the same iPhone, signing in with Apple may be required to publish on the free plan. |
3. Data from people who answer a form
Answering doesn’t require an account. We record the answers entered, the date they were sent, and the time spent on the form. These responses are passed on to the person who created the form. To view, correct, or erase them, contact that person, who can delete a response from the app. You can also write to us and we’ll point you in the right direction.
To limit spam, keep a script from using up a creator’s quota, and count views, Kivoform computes an irreversible fingerprint from your IP address, mixed with a server secret. The IP address itself isn’t kept, and the fingerprint is deleted after 48 hours at most.
Forms don’t use any cookies. Your browser only keeps, on your device, your light or dark theme preference and, if the creator limited the form to one response per device, a marker showing that you’ve already answered.
Don’t share sensitive data in a form, such as a payment card number or health information, unless its creator has clearly explained what it will be used for.
4. This website
The kivoform.com website uses no analytics tools and sets no cookie unless you use the language switcher. In that case it stores a single functional cookie named lang, whose value is your language code (such as fr or de), for one year. It contains no identifier and is used only to show the site in the language you chose. You can delete it in your browser at any time. Like any website, its host technically processes your IP address while delivering pages and protecting the site against attacks. If you write to us, your message and email address are used only to reply to you.
5. Why we handle data, and on what basis
- Providing the service you asked for (account, forms, responses, subscription) is based on performing the contract between you and Kivoform.
- Protecting the service against abuse, fraud, and spam is based on Kivoform’s legitimate interest in keeping the service reliable and fair.
- Notifications are based on your consent, given when you turn them on.
6. How long data is kept
- Your account and forms are kept until you delete your account.
- Responses are kept for the period chosen for each form (no time limit, one year, six months, 90 days, or 30 days), then deleted automatically.
- Session tokens expire after 180 days without use.
- Connection fingerprints are deleted after 48 hours at most.
- After an account linked to Apple is deleted, an irreversible fingerprint of the Apple identifier and the number of responses received that month are kept until the end of the month, to keep anyone from renewing a free quota by creating a new account. Nothing else is kept.
- Emails we receive are kept for as long as needed to handle your request.
7. Who receives data
Kivoform doesn’t sell any data and doesn’t use it for advertising. It’s processed by technical service providers.
- Cloudflare, Inc. hosts this website, the API, the database, uploaded images, and the form pages.
- Apple provides the App Store and purchases, Sign in with Apple, notifications, and the DeviceCheck verification.
These providers may process data outside the European Union, under the safeguards provided by the GDPR, such as standard contractual clauses.
8. Security
Communications are encrypted with HTTPS. Passwords for forms and results pages are stored in hashed form, session tokens as fingerprints, and password attempts are limited. Each creator can only access their own forms.
9. Your rights
You can ask for access to your data, and for its correction, erasure, or portability. You can also ask us to limit its processing, or object to it.
- To delete your account and all your data, open the Account screen in the app and tap Delete my account.
- To get your responses back, use the CSV or Excel export of each form.
- For any other request, write to contact@kivoform.com. You’ll get a reply within one month.
If you believe your rights aren’t being respected, you can contact the CNIL, the French data protection authority, at cnil.fr.
10. Children
Kivoform isn’t intended for children and doesn’t knowingly collect their data.
11. Changes
This policy may change, for example if a feature is added. The update date appears at the top of this page.