Privacy Policy

This Privacy Policy explains what data Formulon("we", "us") collects when you use the Service, why we collect it, how we protect it, and the choices and rights you have.

Formulonis currently operated by an individual based in the Republic of Uzbekistan (see the "Who operates this service" section of our Terms of Service), acting as the data controller for the personal data described below. You can reach us using the contact details at the end of this policy.

Depending on how you use the Service, we collect:

• Account data: your name, email address, and profile picture, provided by Google or GitHub when you sign in.
• Usage data:the prompts you submit, the formulas generated for you, and how many generations you've used today. If you're not signed in, we track your daily usage by IP address only, without any other identifying information.
• Billing data: if you subscribe to Pro, payment is handled entirely by Paddle (our Merchant of Record) — we never see or store your card details. We only store your Paddle customer ID and subscription status.
• Technical data: standard request metadata such as your IP address and timestamps, generated as part of operating and securing the Service (for example, in server logs and the rate-limiting described below).

Where the GDPR or a similar law applies to you, we rely on the following legal bases:

• Performance of a contract — to create your account, generate formulas you request, and manage your Pro subscription.
• Legitimate interests — to enforce daily usage limits and prevent abuse, to keep the Service secure, and to maintain basic operational logs.
• Legal obligation — where we must retain billing records for tax or accounting purposes.

• OpenAI(United States) — your prompt text is sent to OpenAI's API to generate the formula, explanation, and example.
• Paddle (United Kingdom / global) — handles checkout, billing, and subscription management for Pro plans as Merchant of Record.
• Google / GitHub — used solely for authentication (OAuth sign-in).
• Hosting & infrastructure — our application and database are hosted with Vercel and Neon (PostgreSQL), who process data on our behalf to operate the Service.

We do not sell your personal data, and we do not use your prompts to train our own models. Because these providers operate internationally, your data may be processed in countries outside your own, including the United States; where required, we rely on the safeguards these providers offer (such as standard contractual clauses) for such transfers.

We use a session cookie (set by our authentication provider) to keep you signed in. We do not use third-party advertising or tracking cookies.

We keep your account data and formula history for as long as your account is active. Free-plan formula history older than 7 days is no longer shown in your history, though the underlying record may be retained briefly before cleanup. Anonymous, IP-based usage records are deleted automatically after a few days. You can delete your account and associated data at any time from your Billing page.

We use reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls on our database, and never storing your payment card details ourselves. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have some or all of the following rights over your personal data: to access it, to correct inaccurate data, to request its deletion, to restrict or object to certain processing, to receive a copy of it in a portable format, and to withdraw consent where processing is based on consent. You can exercise the deletion right yourself, immediately and permanently, from the Billing page. For any other request, contact us using the details below — we will respond within a reasonable time. If you are in the European Economic Area or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. As stated above, we do not sell personal information. You can exercise these rights using the contact details below.

The Service is not directed at children and is not intended for use by anyone under 18 (or the age of legal majority in their jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We use automated logic to enforce daily generation limits based on your account and IP address. This affects only how many formulas you can generate per day and does not produce any other legal or similarly significant effect on you.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do, and where practical will provide additional notice of material changes.

Questions about this policy, your data, or any issue with the Service can be sent to b3kforever@gmail.com.