Privacy Policy

The short version

In this policy, "Forma", "we" and "us" mean the developer of the Forma Android application. "You" means the person using the app.

Your media files

Every tool in Forma — extraction, cutting, merging, conversion, compression, speed, transform, GIF, volume, voice isolation and ringtone creation — runs entirely on your device using local processing.

• We do not upload, copy, stream, back up or scan your files.
• We do not read filenames, metadata or thumbnails off the device.
• Exports are written to your device storage and listed in My Creations. Deleting them there deletes them from your device.
• The app works with no network connection at all. Only ads and, if you buy it, Premium validation require the internet.

Data we collect

Forma itself collects no personal information. Data handled in the app falls into three buckets:

Diagnostics

If the app crashes, Google Play may send an anonymised crash report through Android's built-in reporting. It contains device model, OS version and a stack trace — never your files or their contents. You can turn this off in your device's Google settings.

Permissions we ask for

• Photos and videos / audio and music (READ_MEDIA_*) — so you can pick the file you want to work on. Used only when you open the picker. You can grant partial access to selected items, and revoke it at any time in Android Settings.
• Notifications — optional, to tell you a long conversion has finished.
• Internet and network state — to load ads and verify a Premium purchase. Nothing else uses the network.

Forma does not request contacts, location, camera, microphone or phone permissions.

Advertising partners

The free version of Forma shows ads supplied through third-party advertising networks. These partners are independent controllers of the data they collect and act under their own privacy policies. They may collect your device's advertising identifier, IP address, device and operating-system details, coarse location inferred from IP, and interaction data such as which ads were shown and tapped — used to serve, cap, measure and (where you allow it) personalise ads and to detect fraud.

We do not share your media, exports or file names with any of these partners. Ad requests carry only the technical and identifier data described above.

Your advertising choices

• Buy Premium. Ads and their SDK data collection stop entirely.
• Reset or delete your advertising ID. Android Settings → Privacy → Ads. Deleting the ID stops personalised advertising across apps.
• Consent. In the EEA, UK and Switzerland, Forma shows a Google-certified consent message on first launch (UMP / IAB TCF). You can reopen it at any time from Settings → Privacy options and change or withdraw your choices.
• Non-personalised ads. If you decline personalisation, partners still receive limited data needed to serve a contextual ad, cap frequency and prevent fraud.

Purchases

Forma Premium is a one-time purchase processed by Google Play. We never see or store your payment details. Google provides us with a purchase token so the app can confirm your entitlement and restore it if you reinstall. Refunds are handled under Google Play's policies.

Data retention

We hold no personal data on our own systems, so there is nothing for us to retain or delete on request. On-device data — your files, exports and preferences — remains until you delete it in the app, clear the app's storage, or uninstall Forma. Advertising partners retain data for the periods stated in their own policies.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent (GDPR / UK GDPR), or to know about, delete, correct and opt out of the "sale" or "sharing" of personal information (CCPA / CPRA). Forma does not sell personal information for money.

Because Forma holds no personal data itself, most requests concern the advertising partners, who each act as their own controller. To exercise a right against a partner, use the contact route in its privacy policy above. For anything else — or if you are not sure where to start — email support@sunstack.app and we will help. You also have the right to complain to your local data protection authority.

The legal bases we rely on are your consent for personalised advertising, and legitimate interests for serving contextual ads, fraud prevention and basic crash diagnostics.

Children

Forma is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect personal data from them. If you believe a child has provided personal data through the app, contact us and we will act on it.

International transfers

Our advertising partners operate globally and may process data in countries other than yours, including the United States. Where required, they rely on Standard Contractual Clauses or another approved transfer mechanism, as described in their policies.

Security

Keeping processing on-device is the core of Forma's security model: there is no server holding your media to breach. Network calls made by the app use encrypted connections. No system is perfectly secure, so please also protect your device with a screen lock and keep Android up to date.

Changes to this policy

If we change how data is handled — for example by adding or removing an advertising partner — we will update this page and revise the date at the top. Material changes will also be announced in the app before they take effect.

Contact