Privacy Policy
ScentPassport · Last updated: June 2026
Draft — pending review by the ScentPassport team. Not yet legally binding.
We'll keep this simple. ScentPassport is built on the idea that fragrance discovery should feel personal and easy — and we think your privacy policy should feel the same way. We've written this in plain language, not legal jargon. A lawyer will review it, but a human wrote it first.
What we collect
When you join:
- Your email address (used to save your preferences and send you updates, if you opt in)
- How you found us (referral source, if applicable)
When you use the app:
- The moods you select and fragrances you save to your Scent Collection
- Layering combinations you create in the Layering Lab
- If you use the Scent Stylist, the free-text input you type (this is sent to an AI model to generate your recommendation and is not stored long-term)
Automatically:
- Basic usage data (which screens you visit, how long you spend) to help us improve the experience
- Your device type and browser (so the app works properly on your phone or desktop)
- A unique anonymous identifier stored locally on your device, used to remember your session
We do not collect your name, location, payment details, or any sensitive personal data at this stage.
How we use it
- To match you with fragrance recommendations based on your mood
- To save and display your Scent Collection and Layering Lab creations
- To send you product updates or fragrance inspiration, only if you opted in when you joined
- To understand how people use the app so we can make it better
- To comply with legal obligations if required
We do not sell your data. We do not share it with advertisers.
Who we share it with
We work with a small number of trusted third-party services to run the app:
- Supabase — our database and backend infrastructure (your data is stored here securely)
- Anthropic — powers the AI Scent Stylist feature (your text input is processed to generate a response; Anthropic's own privacy policy applies to this processing)
- Lovable — the platform used to build and host the app
These services are bound by their own privacy policies and data processing agreements. We've chosen providers with strong data protection standards.
Your choices
- Unsubscribe from emails at any time using the link at the bottom of any message we send
- Request your data — email us and we'll tell you what we hold about you
- Ask us to delete your data — we'll remove your account and associated information
- Withdraw consent for marketing at any time
To exercise any of these rights, contact us at: privacy@scentpassport.ai
California residents — your rights under CCPA
If you live in California, the California Consumer Privacy Act (CCPA) gives you specific rights over your personal information.
What you have the right to:
- Know what personal information we've collected about you, where it came from, how we use it, and who we share it with
- Access a copy of the personal information we hold about you (up to twice per 12-month period, at no charge)
- Delete your personal information, subject to certain exceptions (for example, where we're required by law to keep it)
- Correct inaccurate personal information we hold about you
- Opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising, so no opt-out is currently required. If this ever changes, we will update this policy and provide a clear opt-out mechanism before doing so
- Non-discrimination — we will never treat you differently, charge you more, or provide a lesser experience because you exercised any of your privacy rights
How to submit a request:
Email us at privacy@scentpassport.ai with the subject line "California Privacy Request." We'll verify your identity and respond within 45 days. If we need more time, we'll let you know.
You may also designate an authorized agent to submit a request on your behalf. We'll ask for written proof of authorization.
Categories of personal information we collect (as defined by CCPA):
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Email address, device ID | Yes |
| Internet / network activity | App usage, screens visited | Yes |
| Inferences | Mood preferences, scent profile | Yes |
| Geolocation | Precise location | No |
| Financial information | Payment data | No |
| Sensitive personal information | Health, biometric, government ID | No |
We collect this information for the business purposes described in the "How we use it" section above.
Cookies and local storage
ScentPassport uses local storage on your device (not traditional cookies) to remember your session and anonymous passport ID. This is essential for the app to function. We do not use tracking cookies or advertising cookies.
Data retention
We keep your data for as long as your account is active. If you ask us to delete your account, we'll remove your personal information within 30 days, except where we're required by law to retain certain records.
Children
ScentPassport is not intended for children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
If we make material changes, we'll notify you by email (if you're subscribed) or by a notice in the app. The "last updated" date at the top of this page will always reflect the current version.
Contact
Questions, requests, or just want to talk privacy?
Email: privacy@scentpassport.ai
ScentPassport · San Francisco, CA
