Privacy Policy
Last updated 13 September 2026
JiffyThat lets you describe a form in your own words and turns it into a shareable web form. This page explains, in plain language, what we store and why.
Who runs this service
JiffyThat is operated by an individual developer. For any question about your data, write to utsavdoye07@gmail.com.
What we collect
- Your account. When you sign in with Google we receive your email address, your name and your profile picture from Google. If you sign up with email instead, we store your email address and a securely hashed password. We never see or store your Google password.
- What you create. The instructions you type or speak, the forms generated from them, and the sections you organise them into.
- Form responses. Whatever people type into a form you published. You choose the questions, so you decide what is collected. Responses are visible to the form's owner only.
- Files people attach. If a form asks for an upload, the file is stored privately and can be opened only by that form's owner, through a link that expires.
- A fingerprint of the sender. When someone submits a form we store a one-way hash of their IP address — never the address itself, and it cannot be turned back into one. It exists for a single purpose: to stop one person flooding a form with thousands of fake answers. Nothing else reads it, and it is not shown to form owners.
We do not use tracking or advertising cookies. The only cookie set is the one that keeps you signed in.
Where it is stored
All accounts, forms and responses are stored in a Supabase-hosted PostgreSQL database, and uploaded files in Supabase storage. Each account can only read its own forms, responses and files; this is enforced by the database itself, not only by the app.
Who else sees it
- Supabase — hosts the database and handles sign-in.
- Vercel — hosts the website.
- Groq — when you ask JiffyThat to build a form, the instructions you wrote (or the audio you recorded, if you used the microphone) are sent to Groq so the form can be generated, and the result is sent back. Nothing else about your account is sent.
We do not sell your data, and we do not share it with anyone beyond the services listed above.
Google user data
Signing in with Google gives JiffyThat only your basic profile information: email address, name and profile picture. We use it solely to create your account, show who is signed in, and keep your forms attached to you. We do not read your Gmail, Drive, Contacts or Calendar, and we do not request access to them. JiffyThat's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
Your forms and their responses stay until you delete them or delete your account. Deleting a form deletes its responses with it.
Your choices
- Delete any form, and its responses go with it.
- Ask us to delete a particular uploaded file at the address below.
- Ask us to delete your account and everything in it by writing to utsavdoye07@gmail.com. We will do it within 30 days.
- Ask for a copy of what we hold about you at the same address.
People who fill in your forms
If you publish a form, you are responsible for what you ask people and for how you use their answers. Do not collect passwords, payment card numbers, government ID numbers or similar sensitive details through JiffyThat.
Children
JiffyThat is not intended for people under 13, and accounts should not be created by them.
Changes
If this policy changes, the date at the top changes with it. Significant changes will be announced on the site.