Privacy policy

Last updated: November 12, 2026

Introduction

formulaThis respects your privacy and is committed to protecting your personal data.

This policy applies to the formulaThis Android app, the formulaThis web app (app.formulathis.com) and the formulathis.com website (together, “formulaThis”).

It explains what information is collected, why it is processed, which third-party services are involved, how long it is kept and what your rights are.

Data controller

The data controller is Nans Baro, sole proprietor (entrepreneur individuel), 9 rue de l’Appel de Diane, 34990 Juvignac, France.

Contact: contact@aromathiz.com

Data we collect

Account data

To sync your documents across your devices, formulaThis lets you create an account using Firebase Authentication. We then process:

  • your email address and, if you sign in with a third-party provider (Google), the basic profile information that provider shares (such as your name);
  • a unique user identifier;
  • technical information related to sign-in and session security.

You can use the Android app without an account. In that case, your documents stay on your device and are not sent to our servers.

Your documents

When sync is enabled, the content of your documents, their titles and their creation and modification dates are stored in Google Cloud Firestore so that you can access them from all your devices.

Your documents are only accessible to your account. We do not read, analyze or use their content, except where strictly necessary to answer a support request you send us, or where required by law.

Subscription data

If you subscribe to Premium, we receive the information needed to manage your subscription: plan chosen, status, start, renewal or expiry dates, and purchase platform. We never receive your bank details.

Technical and usage data

Depending on your consent and on the configuration of the services used, formulaThis may collect technical and usage data through Google Firebase services:

  • crash reports and diagnostic information;
  • technical information about your device, such as its model, operating system version and app version;
  • data about your use of the app and your interactions with its features;
  • technical information needed to diagnose errors and improve the app’s stability.

We do not collect the content of your documents through Firebase Analytics or Crashlytics.

Connection data for the website and web app

When you visit formulathis.com or the web app, the hosting provider processes technical connection data, such as your IP address and browser type, needed to display pages and keep the service secure.

Purpose Legal basis
Managing your account, storing and syncing your documents Performance of a contract
Providing Premium features and managing your subscription Performance of a contract
Measuring app usage and diagnosing errors Consent, which you can withdraw at any time
Keeping the service secure and preventing abuse Legitimate interest
Keeping billing records Legal obligation

Advertising

formulaThis does not display ads and does not use any advertising service, such as Google AdMob.

We do not use your information to show you targeted ads.

Purchases and subscriptions

formulaThis offers Premium subscriptions. One-time Premium purchases previously made in the Android app remain valid.

  • On Android, payments are processed by Google Play through Google Play Billing. This processing is subject to Google’s terms and privacy policy.
  • On the web, orders are processed by our online reseller Paddle.com, which acts as Merchant of Record. Paddle collects and processes your payment and billing information (such as your name, email address, country and payment methods) as an independent controller, under its own privacy policy.

Your subscription status across platforms is managed with RevenueCat, which processes your user identifier and purchase history on our behalf.

formulaThis never collects or stores your card numbers or bank details.

Third-party services

formulaThis relies on the following providers:

  • Firebase Authentication (Google): account and sign-in management.
  • Cloud Firestore (Google): storing and syncing your documents.
  • Firebase Hosting (Google): hosting the web app and website.
  • Firebase Analytics (Google): measuring app usage, with your consent.
  • Firebase Crashlytics (Google): crash reports and diagnostics, with your consent.
  • Google Play Billing (Google): payments on Android.
  • Paddle: payments on the web, as Merchant of Record.
  • RevenueCat: managing subscription status across platforms.

To learn more, see the privacy policies of Google, Paddle and RevenueCat.

Storage location and transfers

Your documents are stored by Google Cloud in the European multi-region eur3, within the European Union. Authentication data (email address, identifier) is managed by Firebase Authentication and may be processed in the United States.

Some providers, including Google and RevenueCat, may process data outside the European Economic Area, particularly in the United States. These transfers are covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Cookies and local storage

The web app uses your browser’s local storage to keep you signed in and to save your documents and preferences on your device. This storage is strictly necessary for the service to work and does not require your consent.

Analytics cookies are only set with your consent. You can change your choice at any time from About > Usage statistics.

Where required, the app asks for your consent before collecting optional analytics or diagnostic data. You can refuse this collection and change your choice at any time from About > Usage statistics.

Refusing this optional data does not turn off the processing needed for the service to work, such as syncing your documents or managing your purchases.

Data sharing

We do not sell your personal data and do not use it for advertising.

Your information is only processed by the providers listed in this policy, for the purposes described above.

Retention

  • Account and documents: kept as long as your account exists. After your account is deleted, your account data and synced documents are deleted within 30 days, then erased from backups within a further 30 days.
  • Inactive accounts: an account inactive for three years may be deleted, after a warning email.
  • Billing records: kept for the period required by law (ten years in France), by us or by Paddle.
  • Usage and diagnostic data: kept according to the retention settings of Firebase Analytics and Crashlytics.
  • Connection data: kept by the hosting provider for its own retention periods, for security purposes.

Deleting your account

You can delete your account and all your synced documents at any time from Account > Delete my account in the app, or by writing to contact@aromathiz.com from the email address linked to your account.

Deleting your account does not cancel a subscription purchased on Google Play or through Paddle: remember to cancel it first from Google Play, or using the link in Paddle’s email.

Security

Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by Google Cloud. Access to your documents is restricted to your account by security rules.

Your documents are not end-to-end encrypted. No method of electronic storage or transmission can guarantee absolute security.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability.

You can also withdraw your consent at any time for processing based on it.

To exercise these rights, write to contact@aromathiz.com. We reply within one month.

You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the supervisory authority of your country.

Requests about data processed directly by a provider acting as an independent controller, such as Paddle or Google Play for payments, may need to be sent to that provider.

Children

formulaThis is intended for teachers and for pupils and students. Under French law, if you are under 15, your consent to analytics and diagnostics must be given jointly with one of your parents or legal guardians.

Contact

For any question about this policy or the processing of your personal data: contact@aromathiz.com

Changes

This policy may be updated. Any change is published on this page, with the date of the last update.

History:

  • November 12, 2026: added accounts, document sync, the web app and Paddle payments.
  • October 19, 2026: previous version (Android app).