Privacy Policy

1. Introduction

Welcome to Scented. We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and use when you use our mobile application.

This policy applies to users worldwide, including those in the European Union (EU), United Kingdom (UK), and California (USA). We comply with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username and display name
• Profile picture (optional)
• Bio and profile information you choose to provide

Authentication Data

If you use Sign in with Apple or other authentication providers:

• We receive your email address (or a private relay address if you choose to hide your email)
• We receive a unique identifier from the authentication provider
• We do not store your authentication credentials or passwords
• We do not have access to your Apple ID password or other account details

Fragrance Data

We collect information about your fragrance preferences, including:

• Fragrances in your collection
• Wish list items
• Daily wear logs and history
• Ratings and reviews you provide
• Fragrances you've sampled or used to own

Social Activity

When you interact with other users, we collect:

• Posts, comments, and reactions
• Group memberships and activity
• Users you follow and who follow you

Usage Information

We automatically collect certain information when you use the App:

• Device information (device type, operating system)
• App usage patterns and feature interactions

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract Performance: Processing necessary to provide you with the Scented service, including account creation, fragrance tracking, and social features
• Consent: Where you have given explicit consent, such as opting into push notifications or making your profile public
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, ensuring security, and preventing fraud, where these interests do not override your rights
• Legal Obligations: Processing necessary to comply with applicable laws and regulations

4. How We Use Your Information

We use your information to:

• Provide and maintain the Scented service
• Personalize your experience and recommendations
• Enable social features like finding users with similar collections
• Calculate fragrance overlap between users
• Facilitate Group communities and discussions
• Send important notifications about your account and the App
• Improve our App and develop new features
• Ensure the security and integrity of our service
• Analyze usage patterns to improve user experience
• Comply with legal obligations

5. Information Sharing and Visibility

Your fragrance collection, wish list, and profile information are visible to other users based on your privacy settings. By default:

• Your profile, collection, and wish list are publicly visible to other Scented users
• Your posts in Groups are visible to Group members
• Your daily wear logs may be shared in your feed

You can adjust your visibility preferences in the App settings to control what information is shared with other users.

We do not sell your personal information to third parties. We may share information with:

• Service Providers: Third-party services that help us operate the App, including cloud hosting (Supabase), analytics, and crash reporting. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Legal Requirements: When required by law, court order, or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data would remain subject to this Privacy Policy

We may share aggregated, anonymized data that cannot identify you for research, analytics, or business purposes.

6. Third-Party Services

We use third-party services to help us operate the App:

• Supabase: Cloud database and authentication services for storing your account and fragrance data
• Superwall: Subscription management and paywall services to handle premium features

These third-party services operate under their own privacy policies. They do not sell your personal information and are used solely to help us provide our services.

7. Local Notifications

With your consent, we may send local notifications to your device for:

• Daily fragrance wear reminders
• Monthly "Wrapped" summary notifications

These are local notifications scheduled on your device, not remote push notifications. You can disable notifications at any time through your device settings or within the App. We do not use notification data for advertising.

8. Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• Encryption: Your data is encrypted both in transit (using TLS/SSL) and at rest
• Secure Infrastructure: We use Supabase for data storage, which provides enterprise-grade security and compliance
• Access Controls: We limit access to personal data to authorized personnel who need it to operate our services
• Regular Security Reviews: We regularly review our security practices and update them as needed

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

While we implement reasonable security measures, no system is completely secure, and we cannot guarantee absolute security of your data.

9. Data Retention

We retain your personal data for as long as necessary to provide our services, fulfill legal obligations, and resolve disputes:

• Active Accounts: We retain your data while your account is active and you continue to use our services
• Account Deletion: When you delete your account, we delete your personal information within 30 days
• Legal Retention: Certain information may be retained longer if required by law, for legitimate business purposes (such as fraud prevention), or to resolve disputes
• Anonymized Data: We may retain anonymized, aggregated data that cannot identify you for analytical purposes indefinitely

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export/Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request that we limit how we use your data
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please use the settings within the App or contact us at the email below. We will respond to your request within 30 days (or sooner if required by law).

11. Information for EU/UK Users (GDPR)

If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to lodge a complaint with a supervisory authority if you believe your data has been processed unlawfully
• The right to be informed about international data transfers
• The right not to be subject to automated decision-making

Your data may be transferred to and processed in the United States, where our service providers are located. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR requirements.

12. Information for California Users (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so there is no need to opt out of sales
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, contact us at the email below or use the in-app settings.

13. Children's Privacy

Scented is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If we learn that we have collected information from a child under the applicable age, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us.

14. Third-Party Links

The App may contain links to third-party websites or services (such as fragrance retailer sites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes through the App or via email. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the App after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:

scentedtheapp@gmail.com

We will respond to your inquiry as soon as possible, and within any timeframes required by applicable law.