Privacy Policy

Effective date: 25 October 2026 · Last updated: 1 November 2026

This Privacy Policy explains how the ScentMatch mobile application (Android package com.scentmatch.app and its iOS version, together “the App”) and the website www.scentmatch.app (“the Website”) process your personal data. We wrote it to be read, not skimmed past: if anything is unclear, write to us.

In short: we collect your email address to run your account, the content you choose to add (wardrobe, reviews, Scent of the Day), technical analytics and crash data, and — only as permitted by your choices — an advertising identifier used to show ads. The bottle scanner reads labels on your device; camera images are never uploaded or stored. Your account data is hosted in the EU. You can obtain a copy of your data or delete it at any time.

1. Who is responsible for your data

The data controller is ScentMatch, the publisher of the App, reachable at tlt.corporation.contact@gmail.com. ScentMatch is an independent publisher; we have not appointed a Data Protection Officer because we are not legally required to, but every privacy request sent to the address above is handled personally.

2. Data we collect

Category	What exactly	Source
Account data	Email address, a unique user ID, account creation and last sign-in dates. Optional: display name and avatar you choose.	You (sign-in by email magic link or, optionally, email and password — passwords are stored only as a salted hash by our authentication provider and are never visible to us)
Content you create	Scent wardrobe (bottles, decants, samples, wishlist, signature scent), Scent of the Day entries, ratings and reviews, personal notes.	You
Preferences	App language, theme, notification and privacy choices (including your consent status for ads).	You / the App
Advertising identifier	Android Advertising ID (AAID) or, on iOS and only if you allow tracking, the IDFA; plus ad-related device data (IP address, device model, OS version, approximate location derived from IP) processed by Google AdMob.	Your device, via the Google Mobile Ads SDK
Analytics data	Pseudonymous usage events (screens viewed, features used, searches performed, session length), app-instance ID, device model, OS version, language, country.	Your device, via Google Firebase Analytics
Crash and diagnostics data	Crash stack traces, app state at the time of the crash, device model, OS version, free memory and disk, app-instance ID.	Your device, via Firebase Crashlytics
Affiliate click events	Which fragrance and which merchant link you tapped, and when.	The App
Support correspondence	Your email and the content of your message.	You

We do not collect your precise location, contacts, photos, health data, payment information or any special category of data. We do not sell your personal data.

3. Camera and the bottle scanner

The bottle scanner uses your camera only while the scanner screen is open and only after you grant the camera permission. Text on the label is recognised locally on your device using Google ML Kit’s on-device text recognition. Camera frames are processed in memory and immediately discarded: no image is stored, uploaded to our servers or transmitted to any third party. Only the recognised words (for example a brand and perfume name) are used to run a search, in the same way as if you had typed them. You can revoke the camera permission at any time in your device settings; the rest of the App keeps working.

4. Purposes and legal bases (GDPR)

Purpose	Data	Legal basis
Create and secure your account, sign you in, sync your wardrobe and diary across devices	Account data, content, preferences	Performance of a contract (Art. 6(1)(b) GDPR) — our Terms of Use
Publish your reviews and ratings to the community	Display name, avatar, reviews	Performance of a contract (Art. 6(1)(b))
Show personalised ads and measure them	Advertising identifier, ad device data	Your consent (Art. 6(1)(a)), collected through Google’s User Messaging Platform; on iOS also App Tracking Transparency
Show non-personalised (contextual) ads that fund the free App, and prevent ad fraud	Ad device data, IP address	Legitimate interest (Art. 6(1)(f)) in financing the service; where ePrivacy rules require consent for storing or reading information on your device, we rely on the consent collected via the UMP message
Understand how features are used and improve the App	Analytics data	Your consent (Art. 6(1)(a)) where required; you can turn analytics off in the App’s privacy settings
Detect, diagnose and fix crashes	Crash and diagnostics data	Legitimate interest (Art. 6(1)(f)) in providing a stable, secure App; you can object in the privacy settings
Measure affiliate referrals and receive commissions from merchants	Affiliate click events	Legitimate interest (Art. 6(1)(f)) in financing the service
Answer support and privacy requests; comply with law	Correspondence, account data	Legal obligation (Art. 6(1)(c)) and legitimate interest

Affiliate links and the in-app browser

Some fragrance pages show links to online shops. They open in an in-app browser (Chrome Custom Tabs on Android, Safari View Controller on iOS). We may earn a commission if you buy something; this never changes the price you pay. Once you are on a merchant’s website, its own privacy policy and cookies apply — we do not see what you browse or buy there.

5. Advertising, consent and tracking

The App is free and funded by ads served by Google AdMob.

Consent (EEA, UK, Switzerland): on first launch we show a consent message powered by Google’s User Messaging Platform (UMP), certified under the IAB Transparency & Consent Framework. You can accept, reject or choose purposes. If you do not consent, you will only see non-personalised ads.
Changing your mind: open Profile → Ad privacy choices in the App at any time to review or withdraw your consent. Withdrawing consent does not affect processing carried out before.
iOS — App Tracking Transparency: on iPhone and iPad we ask permission through Apple’s ATT prompt before accessing the IDFA. If you choose “Ask App Not to Track”, the IDFA is never accessed and ads are not personalised using cross-app tracking. You can change this in iOS Settings → Privacy & Security → Tracking.
Android: you can reset or delete your advertising ID in Settings → Privacy → Ads (or Google → Ads).

For details on how Google uses data, see How Google uses information from sites or apps that use its services.

6. Service providers (processors)

We share personal data only with providers that help us run the App, under data processing agreements that bind them to process it on our instructions:

Supabase Inc. (USA) — database, authentication and file storage. Our project is hosted in the EU region (Frankfurt, Germany).
Google Ireland Ltd / Google LLC — Firebase (Analytics, Crashlytics) — usage analytics and crash reporting.
Google Ireland Ltd / Google LLC — AdMob — ad serving and measurement. For personalised advertising Google may act as an independent controller under the Google Ads Controller-Controller Data Protection Terms.
Google ML Kit — on-device text recognition library. No images are sent to Google; the library may send anonymous diagnostic metrics about its own performance.
Vercel Inc. (USA) — hosting of this Website (server logs: IP address, user agent, requested page).
Your email provider and ours (Google, Gmail) for support correspondence; and the transactional email service used by Supabase to send magic-link sign-in emails.

We may also disclose data if required by law or to protect the rights, safety and property of our users or ourselves.

7. International transfers

Your account and content are stored in the EU. Some providers (Google, Vercel, Supabase Inc. for support and operations) are based in the United States or may access data from outside the European Economic Area. Such transfers rely on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on the Commission’s Standard Contractual Clauses (SCCs) with supplementary measures such as encryption in transit and at rest. You can request a copy of the relevant safeguards by email.

8. How long we keep data

Account data and content: as long as your account is active. After account deletion, they are erased within 30 days; encrypted backups roll off within 30 additional days.
Inactive accounts: deleted after 24 months without sign-in, after an email warning.
Analytics data: Firebase Analytics event data is kept for 14 months.
Crash reports: kept by Crashlytics for 90 days.
Affiliate click events: 13 months, then aggregated anonymously.
Consent records: stored on your device and kept for as long as needed to prove consent (up to 13 months before we ask again).
Support emails: 3 years after the last exchange.
Website server logs: per Vercel’s retention, typically no more than 30 days.

9. Your rights

Under the GDPR (and similar laws such as the UK GDPR and the CCPA/CPRA where applicable) you have the right to:

Access your personal data and obtain a copy;
Rectification of inaccurate data — most of it can be edited directly in the App;
Erasure (“right to be forgotten”) — see section 10;
Portability — receive your wardrobe, diary and reviews in a machine-readable format (JSON) on request by email;
Objection to processing based on legitimate interest, including crash reporting and analytics;
Restriction of processing in certain cases;
Withdraw consent at any time from the App’s privacy settings (Profile → Ad privacy choices), without affecting prior processing;
Give instructions about what happens to your data after your death (France).

To exercise these rights, write to tlt.corporation.contact@gmail.com from the email address linked to your account. We answer within one month (extendable by two months for complex requests, in which case we will tell you). We may ask for verification if we cannot confirm the request comes from you.

10. Deleting your account

In the App, open Profile → Delete my account.
Confirm. Your account, wardrobe, Scent of the Day history, reviews, ratings and preferences are deleted from our database immediately and from backups within 30 days.

If you no longer have the App installed, send a deletion request from your account email address to tlt.corporation.contact@gmail.com with the subject “Delete my ScentMatch account”. See also www.scentmatch.app/delete-account. Pseudonymous analytics and crash data that cannot be linked back to you expire on the schedule in section 8.

11. Public content

Reviews and ratings you publish are visible to other users together with your display name and avatar. Do not include personal information you do not want to share. Your wardrobe, wishlist and Scent of the Day log are private unless you choose to share them. Deleting a review removes it from public view.

12. Security

All traffic between the App and our servers is encrypted with TLS. Data is encrypted at rest by our hosting provider. Access to the database is protected by row-level security so each user can only read and write their own private data. Sign-in uses single-use, time-limited magic links by default; optional passwords are never stored in clear text. No system is perfectly secure; if a breach likely to put you at risk occurs, we will notify you and the competent authority as required by law.

13. Children

The App is not directed to children. You must be at least 13 years old to use it. In the European Union, if you are under 16 (or the lower age set by your country, for example 15 in France), you may only create an account with the consent of a parent or guardian, and we do not show you personalised ads. If we learn that we hold data from a child without the required consent, we delete it. Parents can contact us at the address above.

14. The Website

The Website is free and may display ads served by Google AdSense (Google Ireland Ltd / Google LLC). Ads are always labelled “Advertisement”.

Consent (EEA, UK, Switzerland): before any advertising cookie or identifier is used, a consent message from Google’s consent management platform, certified under the IAB Transparency & Consent Framework v2.2, lets you accept, reject or choose purposes. Without consent, Google may only serve non-personalised or limited ads. You can reopen the message at any time from the “Privacy and cookie settings” link it adds to the page.
United States (CCPA/CPRA and other state laws): you can opt out of the “sale” or “sharing” of personal information for targeted advertising through the same message.
What Google processes: cookies or similar identifiers, IP address, browser and device information and the pages viewed, to serve, cap, measure and secure ads and, with consent, to personalise them. See How Google uses information from sites that use its services and manage your Google ad settings at adssettings.google.com.
Our own storage: the Website does not use analytics or other trackers. It only stores, in your browser, whether you closed the “open in the app” banner (no personal data).
Hosting: our host, Vercel, processes technical logs (IP address, browser, page requested) to deliver and secure the site.
Search: words typed in the website search are sent to our database to find fragrances and are not stored.

15. Changes to this policy

We may update this policy as the App evolves or the law changes. The effective date at the top shows the latest version. For material changes we will notify you in the App or by email before they take effect, and ask for your consent again where required.

16. Contact and complaints

Questions or requests: tlt.corporation.contact@gmail.com.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In France, this is the CNIL (www.cnil.fr), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.