This page describes the categories of data that are restricted or require special caution when collected through Fennec Forms.
Restricted data categories
Unless expressly authorized in writing by Fennec Forms, the Creator must not use the Service to collect, process, or transmit categories of data that are subject to heightened legal or regulatory requirements, including health information, biometric data, government-issued identifiers, financial account credentials, precise geolocation, children's data, or other sensitive personal data, where the Service is not expressly designed or marketed for that purpose.
Fennec Forms may suspend, restrict, or terminate access to features or accounts that present elevated legal, security, or abuse risk.
What counts as restricted data
The following categories are considered restricted on the Fennec Forms platform. This list is not exhaustive.
Protected health information (PHI) and medical records. Biometric identifiers such as fingerprints, facial geometry, or voiceprints. Government-issued identification numbers such as Social Security numbers, national ID numbers, passport numbers, or driver's license numbers. Financial account numbers, payment card numbers, or banking credentials. Precise geolocation (latitude/longitude coordinates or street-level location) collected without explicit consent. Personal data of children under 13 (or the applicable age of consent in the relevant jurisdiction). Genetic data. Criminal history or background check results. Immigration or citizenship status. Trade union membership. Data revealing racial or ethnic origin, religious beliefs, political opinions, or sexual orientation, where collected for profiling or automated decision-making.
Why these restrictions exist
Fennec Forms is a general-purpose form and survey platform. It is not designed, marketed, or certified for use cases that require specialized compliance infrastructure such as HIPAA-covered health data processing, financial account data under PCI DSS, or children's data under COPPA or equivalent laws.
Collecting restricted data through a platform that is not built for it creates risk for creators, respondents, and the platform.
What to do if your use case involves restricted data
If your use case requires collecting data in one of these categories, contact Fennec Forms before proceeding. Some use cases may be supported with additional terms, configurations, or safeguards. Others may not be appropriate for the platform.
Reporting concerns
If you believe restricted data has been collected through the platform inappropriately, contact support through the in-app help center.