This policy explains what Survey Collector ("the app", "we") collects, why, and the choices you have. Survey Collector is an offline-first field data-collection app: you design forms, you or your team fill them in (often with no connectivity), and responses sync to your account when a connection is available. Everything is stored on your device first.
The app is provided by Owais Munawwar (Munawartech). For any privacy question or request, contact owais.munawar@gmail.com.
Your data is the account and project information described below. Respondent data is whatever you and your collectors type, photograph or record into your own forms. You decide what your forms ask and whom you survey, so for respondent data you are the data controller and we act only as your processor: we store and sync it on your instructions and never use it for our own purposes. You are responsible for collecting it lawfully, including any notice or consent your respondents are entitled to.
| Data | Why | Kept where |
|---|---|---|
| Forms and responses — form definitions, answers, photos and GPS points captured into photo / location fields, drafts, exports | To run your data collection and show it back to you and your project owner | On your device (source of truth). Synced to our backend (Supabase) under your account whenever the app is online, so your team and your other devices can see it. |
| Account identifier — an anonymous account is created automatically; you may sign in with Apple or Google | To keep your data attached to you across sessions and devices; sign-in is optional | Firebase Authentication (Google). We receive your user ID, and your name / email only if you share them when signing in. |
| Team data — project name, join code, the display name you enter when joining, which project each response belongs to | To let a project owner share forms with collectors and see who collected each response | Our backend. A project owner can see the display name and responses of every collector in their project; collectors see the project roster. |
| Purchase status (Pro subscription entitlement) | To unlock and restore Pro features and to enforce free-plan limits | Processed by Apple / Google and our subscription provider, RevenueCat. We never see your payment details. |
| Form schema and answers you submit for "Insights" | To generate a summary of a form's responses when you ask for one | Sent to our backend and forwarded to a large-language-model provider (Anthropic or OpenAI) solely to generate the summary; not used to train their models under our agreements; not stored by us beyond processing. The offline "on-device" summary never leaves the device. |
| Camera and photo library | To capture or attach a photo for a photo field | Only when you tap capture; the photo is stored with the response. |
| Location (while using the app) | To record a GPS point for a location field | Only when you tap capture on a location field; stored with the response. The app does not track your location in the background. |
| Microphone and speech recognition | To dictate an answer into a field ("voice capture") | Audio is transcribed by your device's speech service (Apple / Google), which may process it on their servers under their policies; we keep only the resulting text you choose to insert. |
| Basic device & diagnostic info (device model, OS, app version, crash / error signals) | To keep the app working and fix problems | Transient / operational. |
We do not use third-party advertising or analytics-tracking SDKs, we do not track you across other companies' apps or websites, and we do not sell personal data. The app is intended for professional field work; we do not knowingly collect data from children under 13 as users. If your surveys concern children, you are responsible for the safeguards your study requires.
We rely on the following processors, each acting on our behalf under contract and only to provide the feature described: Firebase Authentication (sign-in), Supabase (sync database and file storage), RevenueCat (subscription entitlements), Anthropic / OpenAI (Insights summaries), and Apple App Store / Google Play (payments). Provider keys are held server-side and never shipped in the app.
We process your data to perform the service you request (contract), to keep the app secure and working (legitimate interests), and — where required — with your consent (camera, location, microphone).
On-device data lives until you clear it or uninstall the app. Synced data is kept while your account exists and removed when you delete your account. Operational logs are kept for a short period for troubleshooting only.
Data in transit is encrypted (TLS). Synced data is protected by per-account and per-project access rules on our backend: only you, and the owner of a project you collect for, can read your responses; only a project's owner can change its forms.
We will post any changes to this policy at this address and update the date above.