Privacy

What we store. Your email address and password hash (for signing in), and what you put in yourself: your collection, your wishlist, your wear journal — bottles, dates, sprays, ratings, notes — and any bottle photographs you upload or ask the analyst to fetch. Data lives in a Supabase database and storage bucket in the European Union.

Private by default, structurally. A new account is visible to nobody. Sharing your collection is one explicit setting and sharing your wear activity is a second one. Whatever you write in a wear note is excluded from the shared views at the database level — no visibility setting publishes it, and no future setting can be made to.

What we do not do. No advertising, no analytics trackers, no selling or sharing of data with third parties. The only external calls made on your behalf are to Anthropic’s API when you use the analyst (it receives fragrance names, never your identity) and to public web pages when it searches for a fragrance’s record or photograph.

Deletion. Delete your account yourself, inside the app: Collectors → Delete your account. It removes your profile, collection, wishlist, journal, photographs and the account itself, immediately and permanently — nothing is retained. If you prefer, write to the address above instead and it is done within 30 days, or sooner.

The mobile apps. The iOS and Android apps are shells around this same service: they store your session on your device and add no data collection of their own — no device identifiers, no location, no contacts.