Formly icon Formly by Frost Tec LLC

Privacy Policy

How Formly handles your information.

This policy explains what Formly stores on your device, what information may be processed by Formly services, and what happens when you use features such as secure profile sharing.

Last updated: August 8, 2026

1. Who operates Formly

Formly is owned and operated by Frost Tec LLC. Formly is document-preparation software, not a law firm, not legal advice, and not affiliated with any government agency.

2. Information stored on your device

  • Profile information, form answers, case-role relationships, selected forms, and form progress are generally stored locally in the Formly app on your device.
  • By default, Formly uses profile and form answers locally on your device and does not upload them as part of ordinary document preparation.
  • Preview and completed PDF generation is handled by the app using the form data and supported templates available to it.
  • Deleting your Formly account does not automatically erase local app data from every device. Use the app's delete options or remove the app's local data if you also want that device data removed.

3. Secure profile transfer

  • When you choose to share a profile, the exporting Formly app encrypts the selected profile package before sending the encrypted package for temporary transfer.
  • The encrypted package may be stored on Formly infrastructure for up to 48 hours so the receiving Formly app can download it. It is intended to be automatically deleted when the transfer window expires.
  • The decryption key is placed in the share-link fragment after #key=. URL fragments are client-side and are not sent as part of the normal HTTP request to the Formly website. Formly does not need the key to store or route the encrypted package.
  • The Formly website's /import/ fallback page does not download, decrypt, display, or inspect the shared profile package. It routes the user to the Formly app or app-store options.
  • Treat the complete share link as sensitive. A person who receives the valid link may have both the transfer token and the decryption key needed by the app to import the package.

4. Account and authentication records

Formly may process limited server-side information needed to operate accounts, authentication, support, security, and paid access.

  • Email address, phone number, account identifiers, authentication records, and account status.
  • Security events, session or access records, and information reasonably needed to detect abuse or protect accounts.
  • Support communications and information you choose to provide when contacting support.

5. Payments and entitlement verification

  • Mobile purchases may be processed through the Apple App Store or Google Play, depending on your device and the product offered.
  • Formly does not collect or store your full payment-card number for app-store purchases.
  • Purchase verification may involve product identifiers, purchase or transaction tokens, order or transaction status, entitlement records, refund status, revocation status, and fraud-prevention records.

6. Diagnostics and support

Formly may process security logs, error reports, crash or diagnostic information, and support communications to maintain and improve the service, diagnose failures, prevent abuse, and protect accounts. These records are separate from Formly's normal local profile-answer storage.

7. App services and form assets

The app may contact Formly services to authenticate an account, check the available form catalog, download supported form definitions, PDF templates or continuation resources, verify purchases or entitlements, and perform other service operations. Except when you intentionally use a feature such as secure profile transfer, the normal asset-download process does not require Formly to upload your local profile-answer database.

8. Sharing and service providers

  • Formly does not sell personal information.
  • Formly may use service providers for authentication, app distribution and purchases, hosting, security, diagnostics, and support. Those providers may process limited information as needed to provide their services.
  • Information you intentionally share through a profile-transfer link is shared at your direction with the person who receives that link.

9. Deletion and retention

  • Account deletion removes normal account data when possible, subject to limited retention described below.
  • Users can request account deletion through available in-app controls, the website account page, or support. Local device data must be removed separately if you want it erased from that device.
  • Temporary encrypted profile-transfer packages are not intended as permanent storage and are designed to expire automatically after the transfer window.
  • Limited records may be retained when reasonably necessary for payment records, fraud prevention, chargeback or refund disputes, security, legal compliance, or abuse prevention.