Effective date: 20 June 2026 · Applies to the forma. application for iPhone, iPad and Mac
forma. is built around on-device processing. Your documents, questionnaire answers, company profiles and assessments are created and stored on your device. We do not operate servers that receive, store or read your content. We have no user accounts, no analytics SDKs, no advertising trackers.
Documents and questionnaires. Everything you enter to generate a document (names, addresses, contract terms, uploaded details) is processed locally and stored in the app's database on your device. It never reaches us.
iCloud sync. If you enable iCloud on your device, the app stores its data in your private iCloud database operated by Apple so it syncs between your devices. That data is encrypted in transit and at rest by Apple, is tied to your Apple ID, and is not accessible to us. You can disable it at any time in iOS/macOS Settings → iCloud.
Purchases. All payments are processed by Apple through the App Store. We receive no payment details. Apple's privacy policy applies to the transaction.
Counterparty checks. When you run a counterparty check, the company name or number you enter is sent to public registries and sanctions databases (such as the UK Companies House API, OpenSanctions, the U.S. OFAC sanctions search and GLEIF) to retrieve public records. Only your query text is transmitted; no other data leaves the device. These services may log requests under their own policies.
We do not collect, sell, rent or share personal data. We do not profile users. We do not send marketing communications. We cannot access, restore or delete your documents — they exist only on your devices and in your private iCloud.
You control all data. Deleting a document deletes it from your device (and your iCloud, if sync is enabled). The app's "delete account data" action wipes all locally stored content. Uninstalling the app removes its local data; iCloud copies can be removed via iCloud settings.
Because we do not receive your personal data, there is ordinarily nothing for us to access, rectify, export or erase on your behalf — those rights are exercised directly on your device. Where the GDPR, UK GDPR or similar laws apply to the limited query data transmitted during counterparty checks, the legal basis is your request to perform the check (performance of a service at your initiative).
forma. is intended for business users and is not directed at children under 17.
We will post any changes to this policy on this page with a new effective date. Material changes will be reflected in the app's release notes.
Separately from the app, the ignito.tech website lets you subscribe to jurisdiction-change email alerts. If you subscribe, we process your email address and your alert preferences (which jurisdictions or region you follow, and your language) solely to send those emails. The legal basis is your consent, given via the checkbox at sign-up; we record the time of consent. Email delivery and list management are handled by our processor MailerLite (MailerLite Limited), which provides the double opt-in confirmation and a one-click unsubscribe link in every message. You can unsubscribe at any time; we keep your address only while you remain subscribed and briefly afterwards for compliance. We do not sell or share this data and use it only for the alerts you requested.
Questions about privacy: customer@ignito.info