Privacy policy

ScentForge ("ScentForge", "we", "us") is a perfume design app run by its founders, who decide how your personal data is used (the "controller"). The ScentForge apps for Android (Google Play) and iOS (App Store) are published by the same controller: the developer name and contact details shown on those store listings are ours.

For anything about privacy, write to info@scentforge.tech. We answer within 30 days, usually much sooner.

• Account: a random user ID. If you sign in, also your email address, name and profile photo from Google or Apple, and how you signed in. Guests have an anonymous ID only.
• What you create: blends (notes, proportions, names, descriptions, artwork), drafts, journal notes, your Scent DNA quiz answers (the scent families you prefer), preferences (language, carrier, Pro mode), likes, ratings and share codes.
• ScentForge One waitlist, only if you join: your email address or WhatsApp number, country, city or area, the ScentForge One place you prefer (optional), the blend you joined from (optional), your language, and whether and when you agreed to receive updates.
• Invitations: if you open an invite link and then create an account, we record which invite code brought you (attribution only; nobody is rewarded). If you invite others, your invite code and how many accounts it brought are stored with your account.
• Usage statistics, only if you allow them: pages viewed (as page types, never your blend names or texts) and app events such as "blend saved", linked to a random device ID — never to your name, email or account ID.
• Orders, only when the shop is open: name, delivery address, phone, items, amounts and the payment reference. Card details are handled by the payment provider (Razorpay) and never reach us.
• Support: messages you send us.
• Usage and security: daily counts of AI requests per account, and a one-way hash of your network address used only to prevent abuse.
• Approximate location, only if you tap "Use my location" in Wear Coach: your position rounded to about 11 km, used to fetch today's weather and not stored on our servers (section 5).
• Voice input, only when you tap the microphone button: we receive the text your device's speech recognition produces, never audio (section 6).
• In the Android and iOS apps: your AI-features choice, the reminders you switch on (kept on your phone) and the creators you hide (section 7).
• Reports you send about a blend or an AI result, including the reported AI request and result.
• On your device: guest blends, settings and your consent choice in the browser's storage, a sign-in cookie (__session) and a language cookie (sf_locale). The app needs these to work.

• To provide the app: save and sync your blends, build your Scent DNA, generate suggestions and share the blends you choose to share (performance of our contract with you).
• To keep ScentForge safe and fair: prevent abuse and apply daily AI limits (our legitimate interests).
• To improve ScentForge: pseudonymous usage statistics with Google Analytics 4 (a random device ID, no name or contact details), only if you allow them (consent).
• To see which invitations bring new members: invite-code attribution, with no rewards (our legitimate interests).
• To tell you about ScentForge One: only if you opted in (consent).
• To fulfil orders and keep the records tax and consumer law require (contract and legal obligation).

We do not sell your data, do not use it for advertising, and do not make decisions about you with legal or similarly significant effects by automated means.

Suggestions, names, descriptions and artwork are generated with Google Gemini (through Google Cloud). We send only what the request needs: notes, your text, a photo you choose to upload, your language and your Scent DNA. We never send your name, email or contact details. Google processes this data under its terms for business customers.

In the Android and iOS apps we ask for your permission before your first AI request; without it nothing is sent to Gemini. You can change or withdraw it at any time in Me › Privacy & your data.

AI output can be wrong. Read our Terms of use before relying on it. You can report any AI result from inside the app ("Report AI result", or Me › Help › Report an AI result); a person on our team reviews it, and the report includes the reported request and result.

Wear Coach can suggest what to wear for today's weather. Your location is used only if you choose it:

• "Use my location": your device asks for permission first (approximate location in the apps). The position is rounded to one decimal place (about 11 km) and sent to our server, which asks Open-Meteo (open-meteo.com), an independent weather service, for the forecast. Open-Meteo receives only the rounded coordinates — no account details.
• Or type a city: the city name is sent to Open-Meteo's place search instead.
• We do not store or log your location on our servers. The weather for a rounded place stays in server memory for up to 30 minutes. Your choice (the rounded place or the city) is remembered on your device only, until you change it or clear the app's data.
• If you allow analytics, Google Analytics derives a coarse region (country or city) from your network address (section 8).

Some text fields have a microphone button ("Speak it"). When you tap it, your device's own speech recognition (built into your phone or browser, provided by Apple or Google) turns what you say into text; that service may process the audio to recognise it. ScentForge receives only the text, never audio, and the microphone is used only while the button shows that it is listening. Voice input is not offered in the Android app.

The ScentForge apps for Android and iOS show the ScentForge service full screen and add a few phone features:

• Sign-in: Google and Apple sign-in use your phone's own sign-in sheets (Google Sign-In and Sign in with Apple, through Firebase Authentication). We receive the same details as on the website (section 2). With Sign in with Apple you can hide your email address. When you delete your account, we also ask Apple to revoke the app's sign-in tokens.
• AI features: the app asks for your permission before the first AI request (section 4).
• Reminders: the Wear Coach and Nose Academy reminders you switch on are scheduled on your phone as local notifications. Nothing about them is sent to us or to a push-notification service.
• News from ScentForge (push notifications): only if you switch it on (Me › Settings › Reminders, or at the end of the app tour) and your phone allows notifications. We then keep this device's push token, its platform, the app's language and version and, when the app is signed in (as a guest or with an account), your user ID, so we can send you occasional news through Google Firebase Cloud Messaging (and Apple Push Notification service on iPhone). A notification may open a screen of the app. Switching it off, or deleting your data, removes this device from our list; turning notifications off in your phone's settings also stops them.
• Location, camera, photo library and microphone (iPhone only) are used only when you ask for them, after your phone's permission prompt. You can withdraw any permission in your phone's settings.
• Sharing and saving go through your phone's share sheet; a file is first written to the app's own temporary folder.
• Hiding a creator: the creators you hide are kept on your device and, if you are signed in with an account, with your account.
• The apps contain no advertising SDK, do not use the advertising ID and do not track you across other companies' apps or websites. Crash or usage reporting is the same as on the website (analytics only if you allow them).

Only with service providers that run ScentForge for us, under contracts that require them to protect it:

• Google (Firebase Authentication, Cloud Firestore, Cloud Storage, App Hosting, Cloud Messaging and Gemini) for hosting, sign-in, storage, app notifications you switch on and AI.
• Google Analytics 4, only if you allow usage statistics: Google signals, advertising features and ad personalisation are off, and page addresses are reduced to page types.
• Apple (Sign in with Apple, and Apple Push Notification service for the iPhone app's notifications you switch on), if you use them.
• Open-Meteo, only when you use Wear Coach's weather: the rounded coordinates or the city you type, with no account details (section 5).
• Razorpay for payments, when the shop is open.
• An email delivery provider, for emails you ask for.

If you publish a blend publicly, its name, notes and your display name are visible to everyone. We disclose data to authorities only when the law requires it.

Our providers store and process data in data centres in the United States, the European Union and other countries. When your data leaves your country, we rely on our providers' safeguards — such as the European Commission's Standard Contractual Clauses — and on the transfer rules of your local law.

• Your account, blends, Scent DNA and preferences: until you delete them or your account. Deleting is immediate.
• Waitlist sign-ups: until you ask us to remove them or delete your account.
• App notification registrations (push token): until you switch them off, delete your data, or the token stops working.
• Invite codes and invite attribution: until you delete your account.
• Your analytics choice: 12 months, then we ask again. Usage statistics in Google Analytics: for the shortest retention period Google offers.
• Your location: not stored on our servers; the weather for a rounded place stays in server memory for up to 30 minutes.
• Reports about a blend or an AI result: until our team has reviewed them, and at the latest until you delete your account.
• AI usage counters and abuse-prevention hashes: 35 days.
• Server logs kept by our hosting provider: up to 30 days.
• Orders: as long as tax and consumer law require (typically 6 to 10 years, depending on the country), then deleted.
• When you delete your account we keep a short deletion record — a one-way hash of your user ID, the date and how many items were removed, with no name or email — to show that we honoured your request.

• Access and portability: Me → Privacy & your data → Download my data gives you a copy in a machine-readable file (JSON).
• Deletion: Me → Privacy & your data → Delete my account (guests: Delete my data). The steps are also on our data deletion page.
• Correction: edit your blends in the app, or write to us.
• Withdrawing consent: switch off "Help improve ScentForge" in Me → Settings (or use Me → Privacy & your data → Privacy choices); unsubscribe with the link in any email, or reply STOP to a waitlist message.
• Objecting, restricting processing, or any other request: info@scentforge.tech.
• Complaining to the data protection authority where you live or work.

Using these rights is free, and we will not treat you differently for using them.

ScentForge is not for children under 13, and we do not knowingly create accounts for them. Where the law sets a higher age for consent (for example 16 in some EU countries), younger users need a parent's or guardian's permission. In India, users under 18 need verifiable consent from a parent or guardian.

Users under 18 cannot publish blends publicly. If you believe a child has given us personal data, write to us and we will delete it.

Our providers encrypt data in transit and at rest. Security rules make sure only you can read your private blends. Staff access is limited to the founders and authorised managers, and administrative actions are logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

• Kuwait: we process data in line with the Data Privacy Protection Regulation of the Communication and Information Technology Regulatory Authority (CITRA).
• Saudi Arabia: under the Personal Data Protection Law (PDPL) you have the rights described above and can complain to the Saudi Data & AI Authority (SDAIA).
• United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data gives you the rights described above.
• India: under the Digital Personal Data Protection Act, 2023 you can access, correct and erase your data, withdraw consent, nominate someone to exercise your rights, and raise a grievance with us at info@scentforge.tech (our grievance contact). If we do not resolve it, you can complain to the Data Protection Board of India.
• Pakistan: we give you the same rights described in this policy.
• European Union, EEA and United Kingdom: the GDPR and UK GDPR apply. The legal bases are listed in section 3, and you can complain to the supervisory authority where you live or work.

We use only what the app needs: the sign-in cookie (__session), the language cookie (sf_locale), and the browser's storage for guest blends and settings.

• Your analytics choice is kept in the browser's storage (sf-analytics-consent-v1) and in a first-party cookie (sf_consent) for 12 months; then we ask again.
• Google Analytics is loaded only after you allow it. Google Consent Mode v2 starts with every signal denied; advertising storage and Google signals stay off, and no user ID is sent. Its cookies (_ga…) are set only after you allow it and are deleted when you switch it off.
• In the Android and iOS apps: a cookie (sf_app) that tells our pages they run inside the app, and your AI-features choice (sf_ai_consent, also in the app's storage) for 12 months. The creators you hide are kept in the app's storage (sf-hidden-creators); your reminder choices stay in the app's own settings.
• An invite code from a link (?ref=) is kept for that browser tab only (session storage) until you create an account.

Notice versions: analytics consent 2026-10; ScentForge One waitlist waitlist-2026-10.

If we change this policy, we will update the date at the top. For important changes we will tell you in the app before they take effect.