Privacy

Last updated: 12 July 2026

What we store

Account data. When you sign in with Google, we store your name, email address, and profile picture, exactly as Google provides them.
Form definitions. The fields, labels, and validation rules for the forms you build, along with their full version history.
Submissions. The responses people submit through your magic links. This data belongs to you as the form owner, and we never read or share it.
Link details. Creation and expiry timestamps for each link, plus any private note you add to help you remember who it's for. Notes are visible only to you.
API keys. If you generate one to create links programmatically, we store it so we can verify your requests.

Where it lives

Everything is stored in Google Cloud Firestore and protected by database-level security rules. Google encrypts your data at rest and in transit by default.

What we don't do

We don't sell or share your data with third parties.
We don't use advertising or tracking cookies, and sign-in is handled entirely by Google.
We don't read the contents of your forms or submissions.

Retention and deletion

We keep your data until you delete it. Deleting a form removes its version history and deactivates its links, and you can delete individual links and submissions anytime from your dashboard. To delete your entire account and everything tied to it, email hello@il-app.xyz and we'll take care of it promptly.

If you received a magic link

Whatever you submit goes directly to the person who sent you the link, and they're the ones in control of it. Links expire automatically after 7 days at most, and each one accepts only a single response.