Privacy Policy

Version 1.2

This privacy policy outlines and details our processing of User data arising from use of our Apps and Services.

1. Responsible authority

Responsible entity for data processing: Forge and Form GmbH, Ebersstraße 32, 10827 Berlin, Germany.

Further contact details: www.forgeandform.co/impressum

2. Scope of data processing

Personal User data that is gathered while using our apps and services is processed in a limited manner and in accordance with the applicable legal regulations.

The processing takes place for the purpose of fulfilling the usage contract pursuant to Art. 6 (1) lit. b) GDPR.

Data is stored for a maximum of 90 days or until the User exercises her or his right for removal under data protection regulations.

Some of the third-party software solutions we use allow the collection and recording of data that could, under certain circumstances, provide information about the identity of the user. We do not make use of these functions and do not evaluate data in this way.

Technical Information

We gather data to give us insight into bugs, malfunctions and any unintended side-effects when using the app. This may include the operating system’s version, system language, crash logs and error messages. The data is used to ensure a stable, fault-free user experience.

User Insight & Content

We gather data about the User’s behavior when interacting with the App. This includes, among other things, time spent on certain screens, tapping of screen elements, a textual description of the video project and interacting with certain features. The User may also upload content via the App which might contain personal data. The data is used to better understand how the User interacts with the app, to let the User use the App and get the best experience, to better organize and manage the content presented on the App, and to better position ourselves to improve our offerings in accordance with User expectations.

Ad-Tracking

For the purpose of evaluating advertising effectiveness, we may collect identification numbers that enable the grouping of data across devices and app instances. Before this happens, the user is always actively asked for permission. The user can object to this form of data collection and processing at any time.

Further information can be found in the privacy notices of the third-party providers referenced here.

Functionality

For some functionality such as effects, commands processing or the provision of content we rely on third parties. If a third party is involved the functionality is either marked "powered by" or similar, or the User is asked for explicit consent prior to any transfer of data.

Additional data

Additional data is gathered only if the User sends it to us directly via e-mail or the contact form within the App.

3. Analysis, Data Processing and Third Party Functionality

For data processing, analysis and additional content or functionality we rely on the parties listed here.

An appropriate level of data protection is assured by the use of standard contract clauses of the EU Commission as defined in Art. 46 (2) lit. c) GDPR.

The legal basis for the data processing is Art. 6 (1) lit. f) GDPR (legitimate interest).

3.1 Analytics and Data Processing

The User can opt out of Analytics inside the App. When opting out, all analysis data relating to the App will be deleted from the User’s device.

Firebase SDKs and Google Analytics for Firebase
Firebase and Google Analytics for Firebase are provided by Google LLC., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States. The data is collected together with an Install ID, which can group the collected information together to a user, but does not allow any conclusion about the identity of the user.
More information about how Firebase and Google Analytics for Firebase handle data can be found here:
https://firebase.google.com/support/privacy

AppsFlyer
The AppsFlyer SDK is provided by AppsFlyer Ltd, 14 Maskit St, Herzliya, Israel. More information about the handling of data collected by the AppsFlyer SDK can be found here:
https://www.appsflyer.com/legal/services-privacy-policy/

Facebook SDK
The Facebook SDK is provided by Meta Platforms, Inc, One Hacker Way, Menlo Park, CA 94025, USA. The data collected using the Facebook SDK can be used by Meta and third parties to target individual users across different apps, platforms and devices. Before data is collected for ad targeting, users of the App are explicitly asked. Users can also object to this data collection at any time.

More information on data processing through the Facebook SDK can be found here:

https://developers.facebook.com/terms/dfc_platform_terms/
https://www.facebook.com/business/m/one-sheeters/gdpr-developer-faqs

Amplitude SDK
The Amplitude SDK is provided by Amplitude Inc., 201 3rd Street, Suite 200, San Francisco, CA 94103, USA.

More information on data processing through the Facebook SDK can be found here:

https://amplitude.com/privacy
https://amplitude.com/amplitude-security-and-privacy

MWM SDK
The MWM SDK is provided by MWM, 54/56, avenue du Général Leclerc, 92100 Boulogne-Billancourt, France.

More information on how MWM handles your data can be found here:

https://mwm.io/privacy-policy/

3.2 Functionality

Some functionality relies on additional processing by third parties. The User will be informed about what is sent and has to consent before data is transmitted to the third party.

Open AI API
Additional functionality and data processing is provided by OpenAI, L.L.C., San Francisco, Pioneer Building, 3180 18th St, San Francisco, USA. More information on how they handle User data can be found here:

https://openai.com/policies/privacy-policy

Stability AI Dreamstudio API
Additional functionality and data processing is provided by Stability AI Ltd., 88, Notting Hill Gate, London, W11 4HP, UK. For more information please review their privacy policy:

https://stability.ai/privacy-policy

Replicate API
Additional functionality and data processing is provided by Replicate Inc., 2261 Market Street #4056. San Francisco CA 94114, USA. More information can be found here:

https://replicate.com/privacy

Azure API

Additional functionality and data processing is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. More information can be found here:

https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy

3.3 Content

Additional content and functionality is provided by Giphy Inc. and Pexels GmbH. We make use of some of their SDKs as well as their APIs which may collect additional information about the User such as search terms etc.. Third Party content providers are marked by "powered by" or similar.

Giphy SDK
Additional content and functionality is provided by Giphy, Inc., 416 W. 13th Street, Suite 207, New York, NY 10014. For detailed information about how they handle User data please review their privacy policy:

https://support.giphy.com/hc/en-us/articles/360032872931-GIPHY-Privacy-Policy

Pexels API
Additional content and functionality is provided by Pexels GmbH, Rheinsberger Str. 76/77, 10115 Berlin. For detailed information about how they handle User data please review their privacy policy:

https://www.pexels.com/privacy-policy/

4. Transfer of Data

We treat personal data as strictly confidential and do not share data with third parties unless given permission by the User. Exceptions arise insofar as doing so is needed in order to fulfill the requirements of the contract with the User or a legitimate interest is given.

5. Changes to our Privacy Policy

We reserve the right to adjust the privacy policy with effect for the future in order to ensure a truthful representation of our efforts to assure the User’s privacy and of our handling of the User’s data.

6. User Rights

Users have the right to

If the User’s personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sent. 1, lit. f) GDPR, the User has the right to object to the processing of her or his personal data according to Art. 21 GDPR, provided that there are reasons resulting from the User’s personal situation or insofar as the objection is aimed against direct marketing. In case of the latter, the User has a general right to object, which we will adhere to without specification of a particular situation.