Version: 2026-10-22
This privacy policy applies to the Funnelforms app for iOS and Android. With the app you see the enquiries (leads)
and appointments of the websites that run Funnelforms Pro and, if you wish, receive a notification for every new
lead.
1. Controller
Funnelforms LLC, a limited liability company under the laws of the State of Wyoming, USA.
Address: 1021 E Lincolnway #9517, Cheyenne, WY 82001, USA.
Represented by its managing members.
Contact: see our legal notice on www.funnelforms.io.
We have not appointed a data protection officer.
Contact for privacy requests: via the contact form at www.funnelforms.io/contact/?topic=privacy or by email to
the address in the legal notice.
2. How the app works
The app talks directly to the website you connected. Leads, notes, statuses and appointments are stored in that
website's database and do not pass through Funnelforms' servers. The operator of the website, that is your company
or your client, is responsible for this data. Please direct any questions about it to them.
The app has no Funnelforms account, no ads and no analytics or tracking tools.
3. What the app stores on your phone
- the list of connected websites with address and name, and your settings such as language and notifications;
- an access key per website, in the Keychain (iOS) or the Android Keystore, not in backups;
- leads and appointments only while the app is running, in memory. They are not stored permanently.
If you disconnect a website in the app, or the device is disconnected in WordPress, the app deletes its access. If
you delete the app, all data on the phone is removed.
4. Connecting a website
To connect, you scan a QR code in the website's WordPress or type in the address and a one-time code. The app sends
the code, the platform (iOS or Android) and the manufacturer and model of your phone to the website. The website stores the access key only in
encrypted form (as a hash), plus manufacturer and model so that admins can recognise and disconnect the device. This data
is held by the website operator, not by Funnelforms.
5. Notifications
Notifications about new leads
Notifications are optional. The app asks for your permission, and you can turn them off at any time in the app or in
your phone's settings.
If you turn them on, the app registers your device's push identifier, the platform and the language with the
connected website. When a new lead arrives, the website sends to our server: the push identifier, the title and text
of the notification (only form and website, no data of the person enquiring), the website address, the entry number
and the number of unread leads. Our server forwards the notification to Apple's notification service (Apple Push
Notification service) or Google's (Firebase Cloud Messaging), which deliver it. Our server stores neither push
identifiers nor texts, only counts per website (delivered, invalid, errors). Apple and Google process the push
identifier to deliver the notification.
The legal basis is the performance of the contract for Funnelforms Pro (Art. 6 (1) (b) GDPR) and, if you use the app
for your employer or a client, their legitimate interest in being informed about new enquiries (Art. 6 (1) (f)
GDPR).
Notifications from Funnelforms
Funnelforms may also send you notifications itself. For this the app registers your device's push identifier, the
platform, the language, the app version and your choices with our server. The identifier is not linked to a website,
an account or your name. The app settings have two switches:
- Important notices (on): notices about outages and important changes to Funnelforms, no advertising. The legal
basis is our legitimate interest in informing users about the operation of the service (Art. 6 (1) (f) GDPR). - News and offers (off): new features and offers from Funnelforms. We only send them if you turn the switch on
yourself. This is your consent (Art. 6 (1) (a) GDPR, Section 7 (2) UWG). We store the time and the version of the
consent text in order to prove it. You can withdraw it at any time with the same switch.
If you turn off both switches or the app's notifications, the app deletes its entry on our server.
6. QR scanner
The app only uses the camera when you open the scanner. The image is analysed on your phone and not sent.
iPhone: The app recognises the code with Apple's camera and image recognition directly on the device. No data is
sent to Apple, Google or Funnelforms in the process.
Android: For the recognition the app uses Google's "ML Kit". According to Google, ML Kit sends usage data to
Google, such as device model, operating system and app version, performance metrics and recognition settings, to
operate and improve the service. Google does not receive images or the content of QR codes. Before the scanner opens,
the app points this out. If you choose "Open scanner" there, you consent to this transfer; only then does the notice
stop appearing (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw your consent at any time by no longer
using the scanner.
Without the scanner, you connect the website by opening the QR code with your phone's camera app or by typing in the
address and code.
7. Downloading and app stores
You download the app from Apple's App Store or Google Play. Apple and Google process data such as your account and
the download under their own responsibility. Their privacy policies apply.
8. Recipients and transfers to third countries
- Hetzner Online GmbH, data centre in Helsinki (Finland): operation of our notification server.
- Apple Inc. (USA): delivery of notifications on iOS.
- Google LLC (USA): delivery of notifications and ML Kit on Android.
Our company is based in the USA. Transfers to the USA are based on the EU-US Data Privacy Framework or on the
standard contractual clauses of the European Commission.
9. Retention
Data on the phone remains until you disconnect the website or delete the app. Our server does not store
notifications about new leads. The website stores its device data until the device is disconnected or the push
identifier becomes invalid; this is up to its operator. We delete the entry for notifications from Funnelforms as
soon as you turn off all notifications from Funnelforms, Apple or Google report the push identifier as invalid, or
the app has not checked in for 6 months. We keep proof of consent to news and offers (identifier only as a hash,
times, text version) for 3 years after withdrawal.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing
(Art. 18) and data portability (Art. 20). Please contact us via the contact form at
www.funnelforms.io/contact/?topic=privacy or by email to the address in the legal notice.
Right to object: Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object
at any time on grounds relating to your particular situation (Art. 21 (1)).
You may lodge a complaint with a supervisory authority, in particular in the member state of your habitual
residence, place of work or the place of the alleged infringement.
11. Changes
We update this privacy policy when the app or the law changes. The version published at
www.funnelforms.io/app-privacy applies.