Who we are
Corm Math is operated by Work by David LLC (“we,” “us,” or “our”). This Privacy Policy covers cormmath.com and the Corm Math web app, hosted at app.cormmath.com. It explains our handling of information when you explore the demo, sign in, keep plant records, or use Community.
For privacy questions or requests, email workbydavid1@gmail.com. The current service is a beta and its features may evolve.
Information we receive
- Account and sign-in information: an account identifier, email address, authentication/session information, and limited identity or basic profile information supplied by the sign-in provider you select. You can sign in with Google, an email link, or ChatGPT. We do not receive your Google or ChatGPT password; email-link sign-in does not require a Corm Math password.
- Private plant records: mother plant names, purchase prices, dates, corm and pup sales, quantities, expenses, notes, and photos you choose to enter. Signed-in personal records are stored under your account so they can sync across devices.
- Profile and Community information: your chosen display name, username, bio, profile photo, posts, comments, attached photos, reactions, and reports. We store the account association needed to show authorship and enforce editing and moderation controls.
- Technical information: our hosting, authentication, and email providers may process IP addresses, browser/device information, request times, errors, delivery events, and security logs. Our operator may access operational logs to investigate issues.
- Support correspondence: the email address, message, and attachments you send when contacting us.
Do not enter payment-card details, passwords, government identifiers, buyer addresses, or other sensitive personal information in notes, photos, or Community content. Plant sales and expenses are records you enter; Corm Math does not process those payments.
Google sign-in and account linking
If you choose Google sign-in, we use the identity information provided through Google and Supabase to authenticate you, verify your email, associate your records with your account, and maintain your session. The current integration uses basic identity permissions; it does not request access to your Gmail messages, Google Drive files, contacts, or calendar.
A Google sign-in session may include basic profile information such as a name or profile image. Your public Corm Math profile consists of the information you choose to save in the app. We do not publish your email address in the Community feed.
Where both sessions prove the same email address, we may associate a Google/email identity with an existing ChatGPT-linked account to preserve access to existing records. We do not use editable profile fields to grant administrator access.
We use Google user data only for the disclosed app features and their operation and security. We do not sell Google user data, use it for advertising, or use it to train artificial-intelligence models. Our handling of Google user data follows the Google API Services User Data Policy, including applicable Limited Use restrictions.
You can revoke Corm Math’s Google connection through your Google Account’s third-party connections. Revoking that connection does not itself delete records already stored in Corm Math; contact us for deletion requests.
How we use information
We use information to provide sign-in, save and synchronize your records, calculate totals and payback, display profiles and Community contributions, deliver requested sign-in emails, respond to support requests, enforce our terms, handle reports, prevent abuse, and investigate reliability or security issues. We may also retain or disclose information when reasonably necessary to comply with applicable law, respond to lawful requests, or protect people’s rights and safety.
We have not added advertising trackers, marketing analytics, paid checkout, marketing email campaigns, or push notifications to the current app or landing page. Our financial charts use the records you enter. Service providers’ own account, security, and operational processing is described in their policies.
What is public and what is private
Private in the app: your signed-in personal plant records, financial entries, and private record photos are not part of the public Community feed. Access controls associate them with your signed-in account. Our operator and service providers may access information when needed to operate, support, secure, or administer the service.
Public: saved profile details, Community posts, comments, and photos attached to public contributions can be read by visitors. Reactions are associated with accounts and displayed as counts and your own selected reactions. Reports are provided to moderators rather than published in the feed.
Only administrators can start discussions in the current Community. Signed-in members can comment and react. Public content can be copied by other visitors. Deleting or hiding it cannot remove copies someone else already made.
Cookies, browser storage, and photos
We use cookies and similar browser storage for sign-in sessions, remembering an explicit sign-out, appearance preferences, workspace selection, demo/browser-only records, and drafts or save recovery. These are functional features rather than advertising cookies.
Demo edits and unsigned browser-only records stay in that browser unless you choose an available import or publishing action. Signing in does not automatically import older browser-only records. The app identifies separate draft areas by account and workspace. Unfinished plant, sale, and expense drafts can be resumed on that device for up to 30 days; they are not synchronized account records. Community text in an unfinished inline comment may be held in page memory while that page is open.
A failed account save may leave a local recovery copy. Browser storage is not a secure vault. Other people using your browser profile, device backups, or exported files may be able to access locally stored information. Clearing site storage removes local records and preferences but does not delete cloud records.
Photos are resized in the browser before upload. Private-record and public-Community photos have different access rules. Photo processing does not make an upload anonymous; check images for personal details before sharing them.
Providers and other disclosures
We use service providers to run Corm Math. The current setup includes OpenAI/ChatGPT Sites and Cloudflare for hosting and app infrastructure, Supabase for Google and email authentication, Google as an optional sign-in provider and support-email provider, and Resend to deliver requested authentication emails through our email setup. Providers receive information needed for their role, such as identifiers and sessions for authentication, record/photo data for storage, or recipient addresses and delivery information for email.
We do not sell your personal information or disclose it for cross-context behavioral advertising. Choosing to publish Community content makes that content available to other visitors. We may disclose information when necessary for legal obligations, security, abuse prevention, or a business transfer involving the service, subject to applicable law and this policy.
Third-party websites and sign-in providers have their own terms and privacy policies. This policy describes Work by David LLC’s practices and does not replace those providers’ policies.
Retention and deletion
We keep account records while the account is active and as needed to provide the service, resolve requests and disputes, meet legal obligations, and protect security. We do not currently automatically delete inactive accounts on a fixed schedule.
You can edit your records and profile in the app. Deleting a workspace clears its plant records and transactions; it does not delete your authentication account, public profile, or Community contributions. Deleting a post or comment hides it from the public feed; copies may remain for moderation or operational purposes. Uploaded photos may remain in storage after an associated record is removed.
For account closure or broader removal of account data, profile information, Community content, or uploaded files, email workbydavid1@gmail.com from your account email where possible. We may need to verify your ownership before taking action. We process requests as required by applicable law, and may retain information necessary for legal, security, fraud-prevention, or dispute-resolution purposes. Copies may also remain in provider backups or logs according to their retention practices. We cannot remove exports or copies stored outside the service by you or other people.
Your choices and requests
Settings lets you change your profile and appearance and export a workspace backup. Workspace exports include plant records, transactions, and associated photos; they do not constitute a full export of your profile, authentication records, or shared Community. For a broader access, correction, portability, or deletion request, contact us at the email below.
Depending on your location and the law that applies to our processing, you may have rights to access, correct, delete, obtain a copy of, or object to or restrict processing of your information, and to withdraw consent where processing relies on consent. Contact us to exercise applicable rights or question a response. We will not unlawfully discriminate against you for exercising privacy rights. Where applicable, you can also complain to your local privacy regulator.
Blocking cookies or browser storage can prevent sign-in, saving, and preference features from working. Since we do not sell personal information or use it for cross-context behavioral advertising, the current service has no such sale or advertising-sharing activity to opt out of.
Security, location, and children
We use HTTPS and account-based access controls to help protect information. No internet service or storage system can guarantee complete security or uninterrupted availability. Keep your sign-in email and device secure and maintain independent copies of important records.
The operator is based in Arizona, United States. Our providers may process information in the United States or other countries where they operate, which may have different data-protection laws. Applicable legal requirements continue to apply.
Corm Math is intended for adults aged 18 and older and is not directed to children under 13. Do not create an account for a child or upload a child’s personal information. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.
Changes and contact
We may update this policy as the service changes. The effective date identifies the current version. We will provide additional notice or obtain consent where required before materially changing how information is handled.
Work by David LLC · Corm Math
Privacy and support: workbydavid1@gmail.com