Privacy Policy

Fomla — Goshen Labs
Last updated: September 25, 2026

1. Introduction

Goshen Labs ("we", "our", "us") built Fomla as an ad-supported educational application with an optional one-time premium purchase. This Privacy Policy explains what information the app uses, where it is kept, and the choices you have.

2. Information We Collect

Most of the app has no login, and it never asks for your email address or phone number. The display name you choose stays on your device. The one exception is the optional League (described below), which needs a Google sign-in.

Stored only on your device:

• Your study progress, scores, streak and daily goal
• Your display name and settings
• Your premium status and ad-unlock timestamps

Sent to our servers (Google Firebase), only to verify Premium purchases:

• An anonymous app ID created automatically for this installation. It is not linked to your name, email address or phone number.
• For a Premium purchase: the Google Play order ID, product, purchase time and status, and a one-way hash of the purchase token (the token itself is not stored)
• The app version and the time of each check

Only if you join the optional League (monthly school and student leaderboard):

• Your Google account, linked to the anonymous app ID above. Firebase Authentication keeps the sign-in record, which includes the email address, name and profile photo that Google provides. We do not read, copy or show them; we only use the resulting account ID.
• The nickname, avatar and school you choose. These are shown publicly to other League players, together with your monthly points and rank. Please do not use your full real name as a nickname.
• Your answers and the time taken on each daily challenge question (kept so you can review them later in the month), and the points and monthly totals we calculate from them
• If your school is not on our list and you ask us to add it: the school name, town and region you type in

The Google services described in section 3 also collect information.

3. Third-Party Services

Google AdMob

AdMob shows ads in the free version. Where the law requires it, the app asks for your consent before showing ads (Google User Messaging Platform). Whether ads are personalized depends on the choices you make there; otherwise ads are chosen from context only. AdMob may collect device identifiers (such as the advertising ID) and usage data to serve and measure ads. You can reset or delete your advertising ID in your device settings.

Google Analytics for Firebase

Firebase Analytics collects usage information (for example screens visited, topics studied and features used) together with an app-instance identifier. It does not receive your name or contact details. We use it to understand how the app is used and to improve it.

Firebase Remote Config

Remote Config delivers app settings such as announcements.

Firebase Cloud Messaging

If you turn on reminders, the app gives our server a push notification token for your device so we can send occasional messages (for example the daily League challenge). The server adds the token to a group such as "all" or "league" and does not store it; Google Firebase Cloud Messaging keeps it to deliver messages. Turning reminders off removes your device from these groups.

Firebase Authentication, Cloud Functions, Cloud Firestore and App Check

These run the purchase check and the League described in section 2. Everyone signs in anonymously; League players also sign in with Google. App Check (Google Play Integrity) confirms requests come from the genuine app.

Google Sign-In

Google Sign-In lets you join the League with your Google account. Google tells the app which account you chose. It is used only for the League.

Google Play In-App Purchases

Premium is bought through Google Play, which handles all payments. We never receive your card or payment details. To confirm a purchase, our server asks Google Play for its status.

Google's data practices are governed by the Google Privacy Policy.

4. How We Use Information

• To verify and restore Premium purchases, and to detect refunds and fraud
• To keep daily limits fair by checking the current date against our server
• To run the League: mark the daily challenge, calculate points, show the monthly boards and detect cheating
• To understand and improve the app (analytics)
• To show ads in the free version

We do not sell your information or share our server data with anyone, except that your League nickname, avatar, school and points are shown to other League players. Google processes our server data for us as our service provider.

5. Children's Privacy

Fomla is an educational app for senior high school students preparing for the National Science and Maths Quiz. Some users may be under 18. Apart from the optional League (which needs a Google account and asks only for a nickname, avatar and school), we do not ask any user for personal information, and we do not knowingly collect personal information from children under the age of 13.

6. Data Storage, Retention & Security

Data on your device is deleted when you uninstall the app or clear its data.

Server data is stored in Google Cloud in Frankfurt, Germany. It is encrypted in transit and at rest, and only our server code can read it; the app itself cannot read or change it. We keep it while it is needed to verify your purchase and delete it when you ask. Order records that are no longer linked to any app ID may be kept as long as needed to handle refunds, chargebacks and fraud, and to meet legal or accounting obligations.

League data is kept while your account exists, so that past months' winners can be shown. When you delete your data it is removed, and the boards are refreshed to drop you. A request to add a school keeps the school name, town and region, but no longer your account.

7. Your Rights & Deleting Your Data

To delete the server data for this installation, open Profile > Delete my server data in the app, or email us at the address below. This also deletes your League profile, answers and points, and signs you out of the League on that phone. It does not delete your Google account itself, and it does not cancel a Premium purchase: Premium stays linked to your Google Play account and is verified again the next time you use it. If you no longer have the app, see how to delete your account.

To clear the data on your device:

• Use "Reset all progress" in Profile
• Clear the app's data in your device settings
• Uninstall the app

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, or want your data deleted, please contact us at:

Goshen Labs
Email: cliffordwilsonk@gmail.com

Disclaimer: NSMQ and National Science and Maths Quiz are registered trademarks of their respective owners. This application is an unofficial educational tool and is not affiliated with, endorsed by, or sponsored by the official NSMQ organizers.