This policy explains what data we collect when you use FormuLab, why we collect it, and what we do with it. It is written to be read, not to be skimmed past.
1. Who we are
Allenrad Technology is a brand of Orchid Food LLC, a Virginia limited liability company, which is the data controller for the information described here.
1327 Chain Bridge Rd
McLean, VA 22101
United States
PO Box 220275
Chantilly, VA 20153
info@allenrad.com
2. The short version
We collect the minimum needed to run your account: your email address, your name, and optional profile details. Your formulas and recipes are stored in your own browser, not on our servers. We do not sell your data, we do not share it with advertisers, and we do not use your content to train AI models.
3. What we collect
Account information
When you create an account we collect your email address and a password, or, if you sign in with Google, the email address and basic profile information Google provides. Authentication is handled by Google Firebase Authentication.
Profile information you choose to add
You may optionally add your full name, company name, role, and a profile picture. These are stored locally in your browser and are included in backup files you export.
Subscription information
If you subscribe to a paid plan, we store a record of which plan you have and when it renews. We never see or store your card details. Payment is processed by Paddle, which acts as Merchant of Record.
Support messages
If you contact us through the Help & Support form, we store the message, the category you selected, your email address, and your account identifier so we can reply and keep a record of the conversation.
Technical information
Our hosting and infrastructure providers record standard technical data such as IP address, browser type, and request times, for security and reliability. We do not use this for advertising or profiling.
4. What we do not collect
Your formulas, ingredients, categories, costs, pricing rules, voice notes, and app settings are stored in your browser's local storage on your own device. They are not uploaded to our servers, and we cannot read them. They leave your device only if you choose to export a backup file yourself.
We do not collect payment card numbers, and we do not use tracking or advertising cookies.
5. Why we use your data
- To provide the service — creating and securing your account, granting access to the features your plan includes
- To process payments — through Paddle, so your subscription works
- To respond to you — answering support requests
- To send necessary emails — account, billing, and service notices
- To keep the service secure — detecting abuse and preventing fraud
Where the law requires a legal basis (for example, under the GDPR), we rely on performance of a contract for account and subscription data, legitimate interests for security and service improvement, and consent where we ask for it separately.
6. Who we share data with
We use a small number of service providers. They process data on our behalf and are not permitted to use it for their own purposes.
- Google Firebase — authentication, database, and server functions (United States)
- Paddle.com — payment processing, invoicing, and tax as Merchant of Record
- Resend — sending transactional email
- Netlify — hosting the web application
- USDA FoodData Central — nutrition reference data. We send ingredient search terms; we do not send your formulas or account information.
We may also disclose information if we are legally required to, or to protect our rights, safety, or property.
7. International transfers
We are based in the United States and our providers process data in the United States. If you are in the European Economic Area or the United Kingdom, your data will be transferred to the United States. Our providers use recognised transfer mechanisms, including Standard Contractual Clauses, for these transfers.
8. How long we keep data
We keep account data for as long as your account is open. If you close your account, we delete or anonymise your account data within 90 days, except where we must keep records longer for tax, accounting, or legal reasons — invoices, for example, are typically retained for seven years.
Support messages are kept for up to two years.
Data stored locally in your browser stays there until you delete it, clear your browser data, or restore a different backup.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Delete your data
- Object to or restrict certain processing
- Receive your data in a portable format
- Withdraw consent where processing is based on consent
To exercise any of these, email info@allenrad.com. We will respond within 30 days. You can also export your own content at any time from the Backup & Export screen in the app.
If you are in the EEA or UK, you have the right to complain to your local data protection authority. If you are a California resident, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
10. Security
We use HTTPS everywhere, rely on Google Firebase for authentication, and restrict access to production systems. No system is perfectly secure, so we cannot guarantee absolute security — but we will notify you and the relevant authorities if a breach affects your personal data and the law requires it.
11. Children
FormuLab is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy. If a change is material, we will notify you by email or in the app. The date at the top of this page always shows when it was last revised.
13. Contact
Privacy questions or requests: info@allenrad.com