🔒 Our Privacy Commitment: Fill4Me (formerly FillYourForm) is designed with security, transparency, and user privacy at its core. Your data is encrypted in transit and at rest, and we never sell or rent your personal information to third-party advertisers or data brokers.
1. Overview & Purpose
Fill4Me (formerly known as FillYourForm, "we", "our", or "the app") provides automated form-filling assistance for online job applications, college admissions, brand collaboration forms, and event registrations. The app securely manages your vault profile and auto-fills web forms inside its built-in in-app browser with your consent.
2. Information We Collect and Manage
To provide automated form filling, the app manages data in your personal "My Vault Profile":
- Account Identification: Full Name, Email Address, Mobile Number, WhatsApp Number.
- Personal & Address Details: Date of Birth, Gender, Parents' Names, Category/Reservation status, Street Address, City, State, PIN Code, Country.
- Identification Numbers (Text): Aadhaar Number, PAN Card Number, Passport Number, Driving Licence Number.
- Educational Credentials: 10th, 12th, and Graduation Roll Numbers, Passing Years, Board Names, Streams, and Percentages.
- Creator & Social Details: Instagram URL/Handle, YouTube Channel URL, Follower/Subscriber Counts, Niche, and Deliverables.
- Biometrics & Document Images: Passport Size Photo, Candidate Signature, Left Thumb Impression, and Scans/Photos of Govt IDs.
3. Where Your Data Is Stored & How It Moves
We maintain strict separation between on-device confidential files and synchronized text data:
- Hardware-Encrypted Text Vault (AES-256): Sensitive identification credentials (such as Aadhaar Number, PAN Card Number, Passport Number, Driving Licence Number, and API keys) are stored on your device using Android Keystore Hardware-Backed AES-256 Encryption (via EncryptedSharedPreferences).
- Local-Only Isolated Document Sandbox (Zero Cloud Upload): All physical biometric files and document scans (Passport Photos, Signatures, Thumb Impressions, Aadhaar/PAN/Passport/DL photos) are stored strictly on your local device inside the application's isolated private sandbox directory (accessible exclusively by Fill4Me (formerly FillYourForm) on your device). These document image files are NEVER uploaded to our cloud databases or shared with third parties.
- Encrypted Cloud Sync (Google Firebase Firestore): Your text profile attributes, category templates, and form submission history are synchronized to Google Firebase Cloud Firestore under your authenticated user ID. This ensures your profile text is backed up safely and accessible if you switch devices. All cloud data is encrypted in transit (HTTPS/TLS) and at rest (AES-256).
- AI Semantic Form-Field & Campaign Details Processing (Google Gemini API): When you trigger AI-assisted form matching or public campaign detail extraction with a Gemini API key, the relevant form question titles, public campaign text, and corresponding text profile fields are sent over encrypted HTTPS to Google's Gemini API (
generativelanguage.googleapis.com) strictly for field classification and campaign metadata extraction. When no API key is provided, the app operates 100% on-device using its local regex/canonical matching engine without sending any data to external AI servers.
4. Diagnostics & Crash Reporting
To maintain app stability and identify issues, the app uses Google Firebase Crashlytics and Google Firebase Analytics to collect anonymized technical diagnostic metrics (such as crash stack traces, device model, and OS version). This data contains no personally identifiable form values and is strictly used to improve app performance.
5. Data Retention & Instant Account Deletion
You have complete control over your data at all times:
- In-App Editing: You can view, edit, or delete any vault field or identification document anytime inside "My Vault Profile".
- Permanent Account & Data Wipe: You can permanently delete your entire account and all associated data with a single tap using the "Delete Account" button in the Navigation Drawer or Vault Profile, or by submitting an online request via our Account Deletion Request Portal. This action immediately deletes your Firebase Authentication record, purges all your records from Cloud Firestore, and wipes all local files, encryption keys, and form history from your device.
6. Third-Party Web Forms
When using the in-app browser to fill external forms (e.g. Google Forms, recruitment portals, university admission portals), the form submission is made directly between your browser and the respective website host. We do not intermediate or intercept external third-party form submissions.
7. WhatsApp Channel Auto-Sync (Administrator-Only Feature)
Fill4Me (formerly FillYourForm) uses Android's Notification Listener access to power a curated form discovery feed. This feature operates exclusively under authorized administrator accounts to monitor public WhatsApp Channel broadcast announcements and extract publicly shared application form links (such as brand collaborations, hiring drives, and creator opportunities). Regular users cannot enable, access, or trigger this feature in any way.
- Explicit Administrator Consent: This feature is disabled by default and operates strictly on an opt-in basis. It is only activated when an authorized administrator explicitly grants Android Notification Listener access in device settings.
- Public Channel Announcements Only (Zero Personal Messages or Contacts): The background listener is programmed strictly to inspect public broadcast announcements from WhatsApp Channels. Personal 1-on-1 chats, private group messages, photos, media, contact names, and phone numbers are completely ignored and NEVER read, processed, or collected.
- Public Form Links Only (Shared Community Feeds): The listener only detects public Google Forms URLs and campaign text (e.g., brand name, deliverables, eligibility criteria, and niche category). This extracted campaign info is synchronized to a shared community Cloud Firestore collection (
curated_category_forms) so that all app users can access trending and active application feeds. Zero personal data, user identity, or sender details are ever attached to these synced forms.
- Full Control & Instant Revocation: Administrators can disable this feature at any time directly through the in-app toggle in the Navigation Drawer or by revoking Notification Access in Android Device Settings. Once turned off, the listener terminates immediately and processes no further notifications.
8. Children's Privacy
Fill4Me (formerly FillYourForm) is intended for general audiences (ages 13 and older) and does not knowingly collect personal information from children under 13 years of age.
9. Contact Us
If you have any questions or privacy inquiries regarding this policy, please contact us at:
📧 Email: support@fill4me.online