Legal

Privacy

Information under Articles 13 and 14 GDPR. This describes what the software actually does, checked against the source, rather than the widest set of permissions a template would ask for.

Final legal, tax, and operational launch verification is still pending. New Checkout is unavailable until the operator records approval. This policy was last updated 2026-08-03.

The short version

Aliquot is built to hold as little about you as possible. Calculators run in your browser and do not send ordinary results to an Aliquot endpoint. Your saved protocols, inventory, history, and timers stay on your device. If you choose Ask Curie about a calculation, the selected inputs, results, and working become part of that AI request. Curie, Reader, and paid plans require an Aliquot account managed through Clerk.

Curie and Reader send submitted content to their active external AI service to answer your request, but Aliquot does not retain that text or the answer as a chat history. AI Scan can send an uploaded image to its configured image-transcription service when enabled. Aliquot also processes account-keyed allowance totals, aggregate topic totals, hosting and analytics telemetry, and billing and Checkout records needed to provide paid plans.

Who is responsible

Anushka Rathore
Connollystraße 9a
80809 München
Germany
hello@aliquotchem.com

No data-protection-officer contact is currently published for Aliquot. Data protection questions go to the address above and are answered by a person.

What stays on your device, permanently

Every calculator, the unit converter, safety lookups, label scanning by default, cookbook, inventory, timers, and calculation history are computed and stored in your browser. A result is not automatically sent anywhere. Choosing Ask Curie about a result deliberately puts the selected calculator inputs, results, and working into an AI request. When you sign in or use an account-required feature, Clerk and Aliquot process the account and session data needed for that feature; ordinary hosting request logs still apply to every visit.

The calculators have no endpoint that receives saved calculator records as a separate product feature. The explicit Ask Curie handoff is the exception, and it is described in the AI rows below. On the account page, Aliquot briefly reads the primary email address supplied by Clerk only to derive and retain its domain; the full address is then discarded.

Everything processed on a server, and why

What	Why	Legal basis	How long
Account and session data managed by Clerk; Aliquot’s authenticated user ID; your full primary email address briefly to derive its domain; the retained email domain; and first-seen and last-seen dates	To sign you in, secure account-required features, and attach paid access to the correct person	Performance of a contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f), for account security	Aliquot discards the full email address after deriving its domain. The remaining fields are kept until deletion is requested or an applicable retention period ends
A Checkout attempt’s account ID, selected plan and period, plus resulting Stripe customer, subscription, and Checkout references	To create or recover a Checkout session, prevent duplicate subscriptions, and attach a completed purchase to the correct account	Steps requested before entering a contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f), in preventing duplicate billing	Checkout session fields remain on the account until their expiry is cleared during later Checkout handling; customer and subscription references remain with the billing record
Curie question and conversation text, including calculator inputs, results, and working when you choose Ask Curie about a calculation	To generate the answer you requested through the configured external AI service	Performance of a contract, Art. 6(1)(b): it is the service you asked for	Not stored by Aliquot. Your browser retains the current thread only for the tab session; the provider’s own terms apply
Reader document text and Reader messages	To answer questions about a document through the configured Reader service	Performance of a contract, Art. 6(1)(b): it is the service you asked for	Not stored by Aliquot after the response; the provider’s own terms apply
AI Scan image bytes and transcription prompt	To transcribe an image through the configured image-transcription service when AI Scan is enabled	Performance of a contract, Art. 6(1)(b): it is the service you asked for	Not stored by Aliquot after the response; the provider’s own terms apply
A salted, truncated hash derived from the client address and a per-instance AI Scan burst counter	To limit rapid repeated requests and protect the image-transcription service from abuse	Legitimate interests, Art. 6(1)(f): preventing service abuse	Only for the life of the running application instance; the counter resets after one minute and one day windows
Account-keyed AI usage totals and identifier-free topic totals	To enforce allowances, operate the service sustainably, and understand which calculator areas need work	Legitimate interests, Art. 6(1)(f): running a secure, sustainable service	The source does not implement automatic deletion of usage totals; they remain until deletion is requested or a retention policy is applied
Billing email, entitlement and subscription references, device IDs, truncated user agents, device timestamps, restore-token IDs, and webhook-event IDs	To grant and revoke paid access safely, bind an account to a subscription, support device recovery, and process Stripe events idempotently	Performance of a contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f), in preventing account and payment abuse	For the subscription lifecycle and then for applicable record-retention periods
Product events, page views, performance telemetry, and server request logs	To operate, secure, and improve the product	Legitimate interests, Art. 6(1)(f): security and operating the service	Under the hosting and analytics providers’ applicable retention settings

Where the basis is legitimate interests, you may object under Article 21 GDPR. The abuse-prevention hash is necessary to use AI Scan safely, so objecting means that feature cannot be provided. The calculators are unaffected and remain fully usable.

AI features, specifically

When you send a Curie question, the conversation is forwarded to the external AI service configured for Curie, which generates the reply. If you selected Ask Curie on a calculator, that request can include its inputs, results, and working. Aliquot does not write your question or the reply to its database, logs, or analytics events. Once the reply has been streamed to you, Aliquot does not keep its own copy.

Reader sends document text and Reader messages to the configured Reader service. AI Scan sends image bytes and a transcription prompt to its configured image-transcription service only when that feature is enabled and used. We keep allowance and usage totals, while topic totals are aggregated without a person-level topic history.

Please do not paste personal data, patient data, or anything confidential into the assistant. It is a chemistry tool. Whatever you type is sent to a third-party AI service, and that service’s own retention rules then apply, not ours. How the assistant works sets out the limits in full.

Browser storage and third parties

Aliquot-controlled cookies support paid access. The app does not set an Aliquot chat-history cookie. Vercel Analytics and Speed Insights are mounted by the app, while their own browser-storage and retention behaviour is governed by Vercel’s current documentation and configuration rather than by this source code.

Clerk manages authentication and session storage for sign-in and account-required features under its own terms. The table below lists only Aliquot-controlled browser storage; Clerk does not publish a stable list of individual cookie names for Aliquot to reproduce here.

Aliquot-controlled browser storage

Name	Where	What it is for	Lifetime	Necessary	Sent from the browser	Readable by scripts
`aliquot.ent`	Cookie	Signed proof of paid access. It grants access only after server-side verification	Browser cookie: 30 days. The signed access token inside expires after 12 hours and can refresh only for an active paid subscription	Yes	No	No, HttpOnly
`aliquot.plan`	Cookie	A readable plan label for the interface. It grants nothing on its own	30 days	Yes	No	Yes
`aliquot-v5`	Cache Storage	Public app shell, content-hashed assets, and cacheable same-origin GET responses for offline use	Replaced on the next service-worker release or when site data is cleared	No	No	Yes
`aliquot-theme, aliquot-teaching, aliquot.tour.seen, aliquot.safety.ack.v1, aliquot.install.sessions.v1, aliquot.install.dismissedAt.v1`	localStorage	Display and teaching preferences, onboarding and safety acknowledgement, and installation-prompt state	Until you clear it	No	No	Yes
`aliquot-cookbooks-v1, aliquot-store-v1`	localStorage	Saved cookbook entries, calculation history, and favourites. These stay in your browser and are not sent to an Aliquot endpoint unless you choose to send calculation context to Curie	Until you clear it	No	No	Yes
`aliquot.curie.quota.v3, aliquot.reader.quota.v1, aliquot.entitlement.refreshedAt.v1`	localStorage	Local display copies of remaining allowance and the last entitlement refresh. The server remains authoritative	Allowance displays roll over monthly; the refresh marker is replaced on refresh	No	No	Yes
`aliquot-inventory, aliquot-timers`	IndexedDB	Reagent inventory and running timers. These stay in your browser and are not sent to an Aliquot endpoint	Until you clear site data	No	No	Yes
`aliquot.curie.context.v1`	sessionStorage	A selected calculator’s inputs, results, and working, carried once into Curie when you choose Ask Curie about that calculation	Removed after Curie reads it, or when the tab is closed	No	Selected calculation data is sent only when you choose Ask Curie	Yes
`aliquot.curie.thread.v1`	sessionStorage	Your current Curie conversation, so a page reload does not lose it	Until the tab is closed or you start a new chat	No	Messages and current-thread context are sent when you ask Curie a question	Yes
`aliquot.billing.restore.v1`	sessionStorage	A one-time restore token while you sign in to complete paid-access recovery	Removed when consumed or when the tab is closed	Yes	No	Yes

You can delete all of it at any time through your browser’s site-data controls, which clear localStorage, sessionStorage, IndexedDB, and Cache Storage. Deleting aliquot.ent removes access to a paid plan on this device until you restore it. Clearing only localStorage erases saved cookbook entries and history, but not inventory or timers in IndexedDB. Export anything you want to keep first.

Who else sees anything

Service or provider	What it does	What reaches it	Where	Transfer information
Vercel	Web Analytics and Speed Insights, plus hosting and runtime infrastructure when a deployment uses Vercel Analytics and Speed Insights are mounted by the app; hosting and runtime use depend on the live deployment configuration	Request metadata needed to serve a Vercel deployment, plus page views, performance telemetry, and enumerated product events	Processing locations depend on the deployed service configuration and Vercel’s current documentation	May involve international processing; current transfer information is available from Vercel and on request
Neon	PostgreSQL storage when the live DATABASE_URL is configured for Neon Only when account, billing, allowance, device, or recovery data is read or written	Account identifiers and email domains; Stripe billing email, customer and subscription references; checkout state; device IDs and truncated user agents; restore-token and webhook-event IDs; and usage counters. No Curie or Reader message text	The region configured for the live database	Current database region and transfer information are available on request
Stripe	Payment processing, subscription management, invoicing, and customer portal Only when you start or manage a paid plan	Customer, billing-address, payment, subscription, and invoice information entered on Stripe pages, plus the Clerk account ID supplied as Checkout metadata and client reference	Processing locations and transfer arrangements are described in Stripe’s current privacy materials	May involve international processing; current transfer information is available from Stripe and on request
Clerk	Authentication, account profile, and session management Clerk middleware and provider code run on matched requests; account data applies when you sign in or use an account-required feature	Account and session data managed by Clerk. Aliquot receives an authenticated user ID and stores an email domain, first-seen, and last-seen dates	Processing locations and transfer arrangements are described in Clerk’s current privacy materials	May involve international processing; current transfer information is available from Clerk and on request
Configured AI text service	Generates Reader responses and assistant answers through the configured text-generation service Only when Reader or the assistant is used	Reader document text and Reader messages; assistant conversation text, including selected calculator context, when the assistant is used	Processing location and transfer arrangements depend on the live service configuration	May involve international processing; do not submit confidential, personal, patient, or proprietary material
Configured image-transcription service	Transcribes uploaded images when AI Scan is enabled Only when AI Scan is enabled and used	Uploaded image bytes and transcription prompt for AI Scan	Processing location and transfer arrangements depend on the active service configuration	May involve international processing; do not submit confidential, personal, patient, or proprietary material

The current technical inventory is kept at Subprocessors. For provider-level contractual documents, applicable transfer safeguards, or the live database region, contact hello@aliquotchem.com.

Transfers outside Europe

Some providers may process data outside the EEA. Processing locations and transfer safeguards depend on the live provider configuration and the applicable provider agreement. The current technical inventory identifies which product action reaches which provider.

Using Curie, Reader, or AI Scan sends the submitted text or image to an external AI service. Do not use those features if your institution cannot accept the service’s current processing terms. Every calculator, the unit converter, the safety data, and the reference tables remain usable without an AI request.

For a procurement review, a records-of-processing entry, or the current transfer documentation, ask at hello@aliquotchem.com.

Analytics

The app mounts Vercel Web Analytics and sends a small set of enumerated product events. The source limits custom event values to enums, slugs, booleans, and small integers: which calculator was used, whether a result was copied, whether an allowance ran out. No question text, calculator values, or explicit Aliquot account identifier is passed in those custom event calls. Vercel’s own collection, browser-storage, and retention behaviour depends on its live service configuration and documentation.

Automated decisions and profiling

There is none within the meaning of Article 22 GDPR. Nothing about you is scored, ranked, or decided by a machine in a way that has legal effect. The assistant generates text; it does not make decisions about you.

Children

Aliquot is built for university and professional laboratory work and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a minor has provided data, write to us and it will be deleted.

Your rights, and what actually happens when you use them

Right	What we do
Access (Art. 15)	We send you every row keyed to your identifier: your subscription record and your usage counters. There is no message history to send, because none exists.
Rectification (Art. 16)	Billing details are corrected in Stripe, where they live, and reflected here.
Erasure (Art. 17)	Your subscription record, device records, and usage counters are deleted. Billing records may be retained where a legal record-keeping obligation applies.
Restriction (Art. 18)	We stop processing while a dispute about accuracy or lawfulness is resolved.
Portability (Art. 20)	Your subscription record as JSON. Your protocols and inventory already have an export button, and are yours alone.
Objection (Art. 21)	You may object to anything based on legitimate interests. The note under the table of uses says what objecting to the abuse-prevention hash costs you.
Withdraw consent	Aliquot does not currently ask for a consent choice in the product. If a feature later relies on consent, the withdrawal path will be shown here before that feature is enabled.

Write to hello@aliquotchem.com. We answer within one month, as Article 12(3) requires, and usually far sooner because the volume is small. There is no charge.

Complaining about us

You can complain to a data protection supervisory authority, in the member state where you live or work or where you think something went wrong. The authority competent for us is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach (contact details). We would rather you told us first, but you are not obliged to.

If something goes wrong

If a breach occurs that is likely to result in a risk to your rights, we notify the competent supervisory authority within 72 hours of becoming aware of it, as Article 33 requires, and we tell affected users directly where Article 34 requires it. What is deliberately absent limits the damage: Aliquot does not store account passwords or card numbers, does not store plaintext IP addresses for metering, and does not keep a Curie or Reader message history.

Changes to this document

When the product changes what it processes, this page changes in the same release, because both read from one file in the source. Material changes are announced on the site, and the review date at the top is the honest one.

Back to Aliquot