Privacy policy

Who is responsible

The data controller is Formulo (getformulo.com), with a postal address at Pune, Maharashtra 411018, India. For anything about privacy, write to hola@getformulo.com. A person answers.

What data we handle

Without an account: your progress and drafts are saved only in your browser and never reach us.

With an account: your email, your name if you give it, the way you sign in (email or an outside account, such as Google), which exercises you have done, your mock exam results and, if you ask for it, the name you want on your certificate. If you sign in with a password, Clerk stores it encrypted and nobody can read it.

If you buy a plan: Dodo Payments handles the payment as the merchant of record. Dodo Payments processes your payment details under its own privacy policy; we only receive which plan you have, its status and the customer and payment identifiers. We never see your card.

If you write to us through the contact form: your email, your message, the topic and, if you give them, your name and the exercise you are asking about. We also store an encrypted fingerprint of your IP address (not the IP itself) to stop spam.

Usage and errors: we measure which pages and features are used and log technical errors with PostHog. If you have an account, that data is tied to your internal ID, never to your email. We do not record your screen.

Why we use it and on what basis

Giving you an account, saving your progress and issuing your certificate: performance of the contract (art. 6.1.b GDPR).

Managing your paid plan: performance of the contract and legal obligations (art. 6.1.b and 6.1.c GDPR).

Sending you service emails, such as the welcome when you create an account or the reply to your message: performance of the contract (art. 6.1.b GDPR).

Sending you Formulo tips and news: only if you agree (art. 6.1.a GDPR). You can withdraw at any time from the link in each email or from "My account".

Measuring usage, fixing errors and stopping spam: legitimate interest in keeping the service working well (art. 6.1.f GDPR).

Who we share it with

We use these providers, who handle data on our behalf and under contract: Clerk (accounts and sign-in, United States), Supabase (database, servers in Frankfurt, European Union), Vercel (website hosting), PostHog (usage and errors, United States) and Brevo (email delivery and contact list, European Union).

Dodo Payments receives your payment details as an independent controller, because it is the one selling you the plan.

We do not sell your data or use it for advertising.

Transfers outside the European Union

Formulo is run from India, and some providers are in the United States. When your data leaves the European Union, the transfer relies on the EU-US Data Privacy Framework when the provider is certified, or on the standard contractual clauses approved by the European Commission.

How long we keep it

Your account data, for as long as you have the account. You can delete it yourself from "My account": your email, progress, certificate and mailing list contact are removed, and the monthly plan is canceled if you have one.

Contact messages are kept so the conversation can continue; if you delete your account, they stop being linked to it. If you want us to delete them, write to us.

Billing data is kept by Dodo Payments for as long as tax law requires.

Minimum age

To create an account you must be at least 14 years old.

Your rights

You can ask for access, correction, deletion, objection, restriction and portability of your data, and withdraw your consent, by writing to hola@getformulo.com. We answer within one month at most.

If you think we have not handled your request properly, you can complain to the data protection authority of your country. In Spain that is the Spanish Data Protection Agency (aepd.es); in the UK, the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy, we update the date on this page. If the change is important, we tell you by email or on the site.