Privacy Policy

This policy explains what personal data Hformin — the trading name of Formin Hubert Akawung, operating from Yaoundé, Cameroon — collects, why we collect it, and what rights you have over it. We are the data controller for the data described here.

1. What we collect

Account data

Your email address, and a display name if you provide one. We need this to create your account, authenticate you, and contact you about the service.

Content you upload

Whatever you put into our products — session notes, voice memos, design briefs, and any files you attach. This is yours. We process it to provide the features you're using, and for no other purpose.

Billing data

Handled by Paddle, our merchant of record. We never see or store your full card number. We receive a record of the transaction — plan, amount, date, country and the last four digits — so we can provide support and meet our accounting obligations.

Form submissions

When you use the contact or waitlist form on this site, we store what you typed — your email address, and your name and message where the form asks for them — in a database on our own server. We also record which page the form was on, and a truncated one-way hash of your IP address, which is used only to block abuse and cannot be reversed to identify you.

Waitlist entries are used for one thing: to email you once when the product opens. There is no newsletter and no drip sequence. Ask us at any time to delete your entry and we will.

Technical data

Server logs recording IP address, browser user-agent, requested page and timestamp. These are generated automatically, kept for security and debugging, and deleted on a rolling basis.

2. Cookies and analytics

This website sets no cookies and runs no analytics or tracking scripts. It is a static site with no third-party embeds, and it loads no fonts, scripts or images from anyone else's servers. There is no cookie banner because there is nothing to consent to. The only request this site ever makes to a server is the one you trigger by submitting a form, and that goes to our own machine.

If we add analytics later, we will use a privacy-preserving, cookieless tool that does not track individuals across sites, and we will name it here before turning it on. Inside the products themselves, a session cookie is used to keep you logged in — this is strictly necessary and cannot be disabled while you're signed in.

3. Why we process your data, and our legal basis

• To provide the service — processing your content and running your account. Legal basis: performance of our contract with you.
• To take payment — via Paddle. Legal basis: performance of our contract, and compliance with tax and accounting law.
• To keep the service secure and working — logs, abuse prevention, debugging. Legal basis: our legitimate interest in operating a secure service.
• To contact you about the service — outages, billing, material changes. Legal basis: performance of our contract. Marketing email, if we ever send it, will be consent-based with a one-click unsubscribe.

4. Who we share it with

We do not sell your personal data, and we do not share it for advertising. We use a small number of sub-processors to run the service:

• Paddle — payment processing and tax, as merchant of record for card payments.
• KwikNkap — mobile money processing for payments made in Cameroon and the CEMAC region.
• Our hosting and infrastructure providers — to run the application and store your data.
• AI model providers — where a feature you use sends your content to a model to generate a summary, answer or image. Content is sent only when you invoke such a feature. We use providers that contractually commit not to train on data submitted through their API.
• Email delivery providers — to send transactional email such as receipts and password resets.

A current, named list of sub-processors is available on request from hello@hformin.dev.

5. International transfers

We operate from Yaoundé, Cameroon and our providers may process data in the United States, the European Union and elsewhere. Where personal data of EU or UK residents is transferred outside those areas, we rely on appropriate safeguards such as Standard Contractual Clauses with the provider concerned.

6. How long we keep it

• Account data — while your account is active.
• Content you upload — while your account is active, then for 30 days after closure so you can change your mind, after which it is deleted.
• Billing records — for as long as tax and accounting law requires, typically up to 10 years.
• Server logs — on a short rolling window, normally under 90 days.

7. Your rights

Wherever you live, we will honour these rights — they mirror the GDPR, and we apply them to everyone rather than only to EU residents:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct data that is wrong or incomplete.
• Erasure — have your data deleted, subject to legal retention duties.
• Portability — receive your content in a machine-readable format.
• Objection and restriction — object to processing based on legitimate interest, or ask us to pause it.
• Withdraw consent — where processing is based on consent.

Email hello@hformin.dev to exercise any of these. We will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and to request its deletion. We do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.

8. Security

We encrypt data in transit with TLS, restrict access to production systems to the smallest number of people necessary, and keep encrypted backups. No system is perfectly secure; if a breach affects your personal data and poses a risk to you, we will notify you and any required regulator without undue delay.

9. Children

Our products are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We will update this page when our practices change, and revise the date at the top. For material changes affecting existing users, we will also notify you by email.

11. Contact

Hformin — trading name of Formin Hubert Akawung
Yaoundé, Cameroon
hello@hformin.dev