Air Fill App – Privacy Policy

Last updated: 15 July 2026.

In short: Air Fill has no user accounts and no server of its own. Your Airtable credentials and your form data stay on your device and are sent only to Airtable — and, if you choose to turn them on, to notification destinations you configure. We do not collect analytics, we do not track you, and we have no access to your data.

This policy covers the Air Fill iOS app. This website has its own separate privacy policy.

No Air Fill account, no Air Fill server

Air Fill connects your device directly to Airtable’s API. We do not operate a backend for the app, and we never receive, store, or process your Airtable data or credentials on our own systems. There is no Air Fill login.

Your Airtable connection

You connect Air Fill to Airtable in one of two ways:

  • Airtable sign-in (OAuth). Air Fill requests permission to read and write records, read your base structure, and read your account email address (scopes: data.records:read, data.records:write, schema.bases:read, user.email:read). Your email is used only to show you which account is connected.
  • Personal Access Token (PAT). You create a token in your Airtable account with the scopes schema.bases:read, data.records:read, and data.records:write, and paste it into the app.

Your credentials are stored in your device’s Keychain (encrypted by iOS) and shared only with other Air Pack apps on the same device. They are never transmitted to us.

What the app works with

To let you build and fill forms, the app reads your Airtable base structure and records, and writes the form submissions you create back into your Airtable base. This information flows directly between your device and Airtable.

What is stored on your device

Air Fill stores the following on your device, inside the app’s shared Air Pack container and protected by iOS: your saved forms, drafts, submission history and the offline queue (including the field values, signatures, and attachments contained in queued submissions), pending linked records, your connection settings, and a cached copy of your Airtable structure. This on-device data is not synced to any server of ours. It is protected by the operating system but is not additionally encrypted by the app, so we recommend using your device passcode and standard iOS security.

Device permissions

If a form uses photo attachments, Air Fill asks for camera and/or photo-library access to capture or attach those photos, and it uses that access only for that purpose. Signature fields are drawn on-device. Air Fill does not request your location, contacts, or health data.

Optional notifications and webhooks

Air Fill lets you optionally configure a notification destination for a form (for example, a webhook URL or a notification service). If you turn this on, the app will send that form’s submitted field values to the destination you specify. This sends your data to a third party that you choose and control, so only use destinations you trust. These features are off by default, and the app shows you a disclosure before you enable them.

Third parties

  • Airtable. Air Fill’s core purpose is to work with your Airtable data, which is sent to and stored in your own Airtable account. Airtable’s handling of that data is governed by Airtable’s own privacy policy and your agreement with Airtable.
  • Apple. Any in-app purchases are processed by Apple through the App Store; we do not receive your payment details.
  • No analytics, advertising, tracking, or third-party SDKs. Air Fill does not include analytics, crash-reporting, advertising, or tracking software, and does not collect usage data or advertising identifiers.

What we can see

Because there is no Air Fill server, we have no logs of your activity and no access to your forms, submissions, or credentials. The only information we receive is what you choose to send us directly — for example, if you email us for support.

Retention and deletion

Because your data lives on your device, you control it. Signing out removes your credentials; removing a connection wipes its stored token and settings; and deleting the app removes its on-device data. There is no server-side copy for us to hold or delete.

Scope of this version

This policy describes the current version of Air Fill, which has no cloud sync and no server-side submission relay. If a future version introduces cloud sync, an account system, or a server that processes your data, we will update this policy before enabling those features.

Children

Air Fill is a productivity tool intended for general/business use and is not directed to children under 13.

Changes and contact

We may update this policy; the date above reflects the current version. Questions: hello@airfill.app.

Air Fill is an independent app and is not affiliated with, or endorsed by, Airtable. “Airtable” is a trademark of its respective owner.