Privacy
Policy

Formul.io ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

This policy explains our handling of personal data and your rights under applicable data protection law, including the General Data Protection Regulation (GDPR) where it applies.

The controller of your personal data is Yauheni Padniuk, a sole trader registered in the Polish Central Register and Information on Economic Activity (CEIDG), Kraków, Poland, who provides Formul.io (see our Terms of Service). Contact the controller about your data at [email protected].

We may collect, use, store and transfer different kinds of personal data about you:

We will only use your personal data when the law allows us to:

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

We use HTTPS with TLS to protect data in transit. Account and permission checks restrict access to private recipe and formulation data. Revocable Sign in with Apple credentials held by our server are encrypted using a separate server key.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Recipe and formulation data is retained as long as your account is active. You can delete individual recipes or request complete account deletion at any time.

Our retention policy limits AI processing traces controlled by Formul.io and recovery backups to 30 days. Account deletion removes user-owned product data and revokes access credentials; legally required financial records may be retained in de-identified form. Disconnecting an AI assistant does not delete your Formul.io account or copies already held by that assistant.

Under data protection laws, you have rights including:

To exercise any of these rights, please contact us at [email protected]

You also have the right to lodge a complaint with a data protection supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl), or the authority of the EU country where you live or work.

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with small amounts of data.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Your data may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR.

We use service providers to operate Formul.io, including hosting, analytics, communications, payment and AI processing services. Separately connected AI assistants process the data they receive under their own terms and privacy policies.

When you connect an assistant such as ChatGPT or Claude through MCP, the permissions you approve determine which tools it can use. Tool results may include recipe names and instructions, ingredient quantities and composition, notes, collection context and calculation results. Write permissions allow the assistant to create or change the corresponding records. You sign in to Formul.io; OAuth gives the client an access token rather than your password.

AI features within Formul.io use OpenAI or Anthropic. To answer a request, the service may send your question, selected recipe or ingredient context, and submitted files to the configured provider. These materials can contain personal or business information you include. Deterministic recipe calculations use the Formul.io calculation engine. The connected assistant's and provider's own policies govern their retention and any use for model training; your account and service settings may affect those terms.

Recipe Import parses the documents you upload — in the app or through a connected assistant — with an AI model from OpenAI to find the recipes and ingredient lines in them. The uploaded file is deleted 30 days after upload, unless an import still in progress needs it. The import job and its extracted preview are kept until you delete your account.

The native iOS app asks for explicit permission before AI actions; declining leaves deterministic calculators and ordinary recipe editing available. In the iOS app, you can withdraw permission for future requests in Settings → Privacy. Withdrawal does not recall information already sent. This permission prompt and setting do not appear on the website, including in browsers on iPhone and iPad.

You can disconnect an assistant in its settings. OAuth clients can revoke their tokens, and API keys can be revoked in Formul.io Settings → Security. Contact support if you need help revoking a connection. To remove data already sent to another service, use that service's deletion controls.

Apple processes purchases made through the iOS app. RevenueCat receives an opaque Formul.io account identifier, store transaction and subscription information, and SDK technical data to verify purchases, restore access, and provide subscription analytics. Recipe content is not sent to RevenueCat for billing. Website purchases continue to use Stripe. We do not receive the payment card details used for an Apple purchase.

The iOS app does not include our website's Google Analytics integration. Its push token identifies the device for notifications; signing out detaches it from the former account. Account deletion removes our account data and requests deletion of the associated RevenueCat customer. Where we hold revocable Apple credentials, we revoke that authorization. Apple may retain transaction records under its own obligations. Deleting a Formul.io account does not cancel an Apple subscription; manage it in your Apple subscription settings to stop future charges.

For business-to-business (B2B) services, we act as a data processor for recipe and formulation data. Business customers remain the data controllers and are responsible for:

Enterprise customers can request a Data Processing Agreement (DPA) by contacting us at [email protected]

Our service is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide prominent notice or contact you directly via email.

If you have any questions about this privacy policy or our privacy practices, please contact us at [email protected]

For GDPR-related requests or concerns, please use the subject line "GDPR Request" for faster processing.