FormlyStudy Privacy Policy
FormlyStudy is an iPhone and iPad app that helps you turn your PDFs into study cards, quizzes, summaries and mind maps. This page explains which data the app processes, where it is kept and what choices you have.
In short
- Your PDFs, cards and study history stay on your device.
- They leave your device only if you turn on a feature that needs it: cloud AI or iCloud sync.
- You don't have to create an account. If you do, your email address, name and sign-in details are stored.
- No ads, no tracking, and your data is never sold.
1. Data controller
The developer of the app and the data controller is Süleyman Çayır.
- Email: destek@formlyapps.com
- Address: Bismil, Diyarbakır, Türkiye
2. Data that stays on your device
The following is stored on your device and never reaches us:
- The PDF files you import and the text extracted from them. Scanned pages are also read on the device.
- Your cards, quizzes, summaries, mind maps and folders.
- Your review history, streak and study statistics.
- Your answers in the welcome screens: country, date of birth, education, exam and goals. They are used only to prepare your plan and suggestions; they are not sent to a server and are not included in the app's backup file.
- Your app preferences, daily usage counter and study reminders. Reminders are set up with your device's own notification system.
If you delete the app, this data is deleted too. If device backup is on, this data may be backed up by Apple's backup system under the terms of your Apple Account; we cannot access that backup.
With Settings › Backup you can save your library to a single file. This file is not encrypted, and you decide where to keep it.
3. On-device AI
If your device supports it, generating cards, quizzes, summaries and mind maps, as well as "Ask Tabi", run on Apple's on-device model. In these cases your content does not leave your device. This is the default option.
Translation is first done on the device with Apple's translation framework. Language packs are downloaded to your device.
AI-generated content can be wrong. Every card is linked to its line in the source; we recommend checking important information against the source.
4. Cloud AI (optional)
You can also have some tasks prepared in the cloud: cards, quizzes, summaries, mind maps, "Ask Tabi" and "Translate in the cloud".
- Your explicit permission is required. To use cloud features you need an account and must approve cloud processing. No content is sent unless you have given that approval. The app never silently switches from the on-device model to the cloud.
- Only the text that is needed is sent. That is the text extracted from the pages you selected, your question together with the document passages needed to answer it, or the lines you want translated. The PDF file itself, page images and the rest of your library are not sent.
- Who processes it: The content is passed through an intermediary server we operate (Supabase, Germany) to OpenAI (United States), where it is processed.
- How long it is kept: Our intermediary server does not store the content or the result; it only logs error codes. Requests are sent to OpenAI with the instruction not to store the response. Under its own terms, OpenAI may keep requests for up to 30 days for abuse monitoring.
- Model training: OpenAI does not use content sent through its API to train its models.
- Quota: To apply your usage allowance, counters linked to your account are kept: the number of pages processed, questions and translations. These counters do not contain your content.
- Free trial: To make sure the free cloud trial is used only once per device, Apple's DeviceCheck service is used. Your device identifier never reaches us and is not stored; Apple keeps only a "trial used" flag for the device.
We recommend not sending documents that contain health or identity information, or personal information about other people, to the cloud.
5. iCloud sync (optional, Pro)
If you turn on Settings › iCloud sync, your library is stored in the private area of your own iCloud account. Your library consists of your PDFs, cards, review history, quizzes, summaries and mind maps. It is synced between the iPhone and iPad signed in to the same Apple Account. This data lives on Apple's servers under the terms of your Apple Account; we cannot see it. If you turn sync off, the copy in iCloud is not deleted; you can delete it in your iCloud settings.
6. Account (optional)
You can use all of the app's on-device features without an account. An account is for Pro and cloud features.
If you create an account, the following is stored:
| Data | When | Purpose |
|---|---|---|
| Email address | With every sign-in method | To identify you and send you codes |
| Name | The name you type when signing up with email; the name Google or Apple shares, if any | To identify your account |
| Password (email sign-up only) | At sign-up and when you change it | Signing in. Your password is not stored as plain text but in a form that cannot be reversed (a hash) |
| User ID | With every sign-in method | To link your account, quota and Pro subscription |
| Sign-in method and sign-in times | At every sign-in | To manage sessions and prevent abuse |
| IP address | With requests to the server | Security and error logs |
If you choose "Hide My Email" when signing in with Apple, the relay address Apple gives us is stored instead of your real address.
For sign-up and password reset, a 6-digit code valid for 15 minutes is sent to your email address. Your session is kept in your device's secure keychain.
Purchases
Pro subscriptions are purchased through Apple; we never see your payment details. If you have an account, your purchase record is reported to our server so your subscription can be linked to your account. This record is signed by Apple and contains the product, the period and the transaction number. During the purchase your account ID is passed to Apple; this is a randomly generated number, not your email address. Apple notifies our server of events such as renewals, cancellations and refunds.
7. Who we share data with
We do not sell your data and do not share it for advertising. We work only with the following service providers to run the service:
| Provider | Purpose | Where the data is processed |
|---|---|---|
| Supabase | Account, sessions, quota and intermediary server | Germany (Frankfurt) |
| Resend | Sending code emails | Ireland |
| OpenAI | Cloud AI (only if you use it) | United States |
| Apple | Sign in with Apple, purchases, DeviceCheck, iCloud sync, on-device model and translation | Under Apple's terms |
| Sign in with Google (only if you choose it) | Under Google's terms |
If a legal obligation arises, we may respond to duly made requests from competent authorities.
8. Tracking and analytics
The app has no ads, no advertising identifier, and no third-party analytics or tracking tools. We do not track you across other apps and websites.
9. Retention and deletion
- Data on your device: Stays on your device until you delete it or remove the app.
- Account data and quota counters: Kept as long as your account exists.
- Deleting your account: Settings › Account › Delete account. Your account and all server records linked to it are deleted: quota, subscription link and trial record. If you signed in with Apple, the authorization at Apple is revoked too. The PDFs and cards on your device and in your iCloud are not deleted; you delete those yourself. To cancel an Apple subscription, use your Apple Account's subscription settings.
- Code emails: Delivery records are kept by the email provider for a limited time.
- Security logs: Server logs are kept for a limited time and then deleted.
If you can't access the app, you can ask us to delete your account by writing to destek@formlyapps.com.
10. Your rights
Regarding your personal data, you can ask:
- To learn which of your data is processed and to receive a copy
- To have incorrect or incomplete data corrected
- To have your data deleted
- To object to processing or withdraw the consent you gave
In Türkiye, Article 11 of the Personal Data Protection Law No. 6698 (KVKK) grants these rights; in the European Economic Area, the General Data Protection Regulation (GDPR) does. Send your request to destek@formlyapps.com; we will reply within 30 days at the latest. If you are not satisfied with our reply, you can complain to the data protection authority in your country; in Türkiye, this is the Personal Data Protection Board.
Legal bases for processing your data:
- Account and purchases: the service relationship between you and us.
- Cloud AI: your explicit consent.
- Security logs and protecting the trial: legitimate interest.
11. International transfers
Your account data is processed on servers in the European Union (Germany). If you use cloud AI, the text you send is processed in the United States. If you use the app from Türkiye, this means your data is transferred abroad. For cloud AI, this transfer is based on the explicit consent you give on the approval screen.
12. Children
FormlyStudy is not directed at children under 13 and does not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.
13. Security
Communication with the server takes place over an encrypted connection. Your session is kept in your device's keychain, and server keys are kept only on the server. Only the server can access the account tables. No system is completely secure; if a breach affects you, we will inform you within the legal time limits.
14. Changes
If we update this policy, we change the date at the top of the page. For an update that significantly changes how we process your data, for example adding a new provider, we will also let you know in the app.
15. Contact
For questions and requests: destek@formlyapps.com