Privacy policy

1. The short version

• You can use Scentaro without an account. Your collection then stays on your device.
• If you create an account, we store your email address, your display name and the collection data you sync, so that it is backed up and available on your other devices.
• We never collect your location, and we never sell your data or use it for advertising.
• You can delete your account from the app at any time. Everything is erased within 30 days.

2. Using Scentaro without an account

Without an account, your bottles, wears, lists, ratings, notes and photos are stored only on your device. We do not receive them.

We still receive the technical data described in section 4 (for example when the app downloads the fragrance catalog), and, if you buy Pro, the subscription information described below.

3. Data we collect when you have an account

• Account: your email address, your password (stored only as a one-way hash), an optional display name, your language, whether your email address is verified, and the date you confirmed you are 16 or older. We do not store your date of birth.
• Sign in with Google or Apple: the identifier and email address the provider gives us (with Apple, this can be a private relay address). For Apple we also keep a token that is used only to revoke Scentaro’s access when you delete your account.
• Signed-in devices: the device name, platform, app version and last activity of each session, so that you can see your sessions and sign them out. Our support team sees the same information, and we count users per platform and app version (totals only) to know when older app versions can stop being supported.
• Your collection, when you sync it: bottles, wears, measurements, lists, ratings, prices, notes and custom fragrances, and the rounded temperature saved with a wear if you use the weather feature.
• Photos you back up: each photo is re-encoded and its metadata (EXIF, including any GPS position) is removed. Photos are kept in private storage and are only reachable through links that expire after 24 hours.
• Fragrance submissions: the fragrances you submit to the shared catalog.
• Subscription: whether you have Pro, the product, the store and the expiry date, received from RevenueCat. We never see your payment card details.

4. Technical data

• Server logs: our servers log requests, including your IP address, to keep the service secure and prevent abuse. These logs are kept for 14 days.
• Crash reports: when the app or the server fails, an error report is sent to Sentry. Personal data is turned off and passwords, tokens and request contents are removed.
• Usage statistics: the app sends a few anonymous events to PostHog (for example “onboarding completed”, “bottle added”, “wear logged”, “paywall viewed”, “purchase completed”) so we can understand how the app is used. They do not contain your email address, your name or your collection.

5. What we never collect

We never collect your location. To show the weather, the app sends an approximate position (rounded to about one kilometer) from your device directly to Open-Meteo, a weather service; it never reaches our servers. The app keeps only the rounded temperature. You can refuse the location permission and use Scentaro normally.

We do not collect your contacts, your date of birth or your payment card details. Reminders are scheduled on your device; we do not send push notifications.

6. Why we use your data

• To provide the service you ask for (performance of our contract with you): your account, sign-in, sync, photo backup, your public shelf and your Pro subscription.
• For our legitimate interests: keeping the service secure and preventing abuse (logs, rate limits), fixing errors (crash reports), and improving the app (anonymous usage statistics).
• To comply with the law, for example when we must answer a lawful request from an authority.

7. Your public shelf

Your shelf is private by default. If you share it, anyone with the link can see your display name (or “A collector”) and your active bottles: brand, name, concentration and type. The page never shows prices, wears, remaining amounts, photos or notes, and it asks search engines not to index it. You can turn the link off or replace it with a new one at any time.

8. Who processes your data

We do not sell or rent your data. We share it only with the service providers that run Scentaro for us, each for the purpose listed:

• Hetzner Online GmbH (Germany): hosting of our servers and database.
• Cloudflare: storage of your photos, of the fragrance catalog download and of our encrypted database backups.
• Google and Apple: sign-in, if you choose them.
• Apple (App Store), Google (Google Play) and RevenueCat: purchases and subscription status.
• Sentry: crash reports.
• PostHog: anonymous usage statistics.

Emails (such as verification codes) are sent from our own mail server. Open-Meteo receives an approximate position directly from your device, as explained above.

9. International transfers

Some of these providers process data outside your country, including in the United States. When the EU General Data Protection Regulation (GDPR) applies, these transfers rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

10. How long we keep your data

• Account and collection data: as long as your account exists.
• When you delete your account: you are signed out everywhere and your account is deactivated immediately. All your data and photos are permanently erased 7 days later, and always within 30 days. Fragrances you submitted that were approved stay in the shared catalog without any link to you.
• Deleted items: when you delete a bottle or another record, a minimal marker (its identifier and the time of deletion) is kept for up to 180 days so that your other devices also remove it.
• Server logs: 14 days.
• Backups: our database is backed up every day, encrypted. Backups are kept for up to 30 days, so erased data is gone from them at most 30 days after it is erased. If we ever restore a backup, we erase again any data whose deletion was requested after it was made.

11. Your rights

Depending on where you live (in particular under Moroccan law 09-08 and, in the European Union, the GDPR), you have the right to access, correct, export and delete your data, and to object to or restrict some uses of it.

• Correct: edit your profile and collection directly in the app.
• Export: the app can export your collection as CSV files, for free.
• Delete: delete your account from the app’s settings, at any time, even if your account is suspended.
• Anything else: write to [email protected]. We answer within one month.

Deleting your account does not cancel a Pro subscription: cancel it in your App Store or Google Play account. You can also complain to a data protection authority: in Morocco the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), or the authority of your country in the European Union.

12. Security

All connections are encrypted (HTTPS). Passwords are stored only as one-way hashes, photos are kept in private storage, backups are encrypted, and access to our administration tools requires two-factor authentication.

13. Age

Scentaro is for people aged 16 or older. If we learn that an account belongs to someone younger, we delete it.

14. Changes to this policy

We will update this page and its date when this policy changes. If a change is significant, we will also tell you in the app or by email before it takes effect.

15. Contact

Mailteor, Morocco. For any question about your data or this policy: [email protected].