Privacy policy
Last updated 13 November 2026
ScentPulse is an Android app that picks which perfume to wear each day from the bottles you own. This policy covers the app, this website and its waitlist: what we collect, why, who processes it for us, how long we keep it, and what you can do about it.
Who we are
ScentPulse is run by Mrub Shuvo, Bangladesh, who decides how your data is used (the "controller"). Write to [email protected] about privacy, and to [email protected] for anything else.
In short
- We collect what the app needs to pick your perfume, and nothing for advertising. There are no ads, no analytics or tracking tools, and we never sell your data.
- Your calendar's titles never leave your phone. Your location is rounded on your phone to about 11 km and used only for the weather.
- AI is used only if you allow it, and the AI providers do not train on what we send.
- You can delete your account at any time, in the app or on this website.
What we collect, and why
| Data | Why | How long |
|---|---|---|
| Your email address | To sign you in with a one-time code; we have no passwords. | Until you delete your account. |
| Your shelf: the bottles you add (name, brand, size, accords, occasions), what you wore and how it went, the accords you like and dislike | To pick a perfume for you and to learn from your choices. | Until you remove it or delete your account. |
| Each daily pick: the bottle, its scores and reason, the weather in words (for example 14°C, rain), the time zone of your phone and, for Premium calendar users, the type, start time and length of the day's events | To show today's pick again without making a new one, and to learn from your ratings. | Until you delete your account. |
| Your approximate location, rounded on your phone to about 11 km (0.1°) | To look up the weather. Our server asks the weather service; your phone does not. | Not saved with your account. The weather is kept per area, for anyone in it, for at most two days. Each pick keeps a fingerprint of its inputs, made with a key only our server holds, so the area cannot be read back from it. |
| Counts of picks, searches and scans per day or month | To apply your plan's limits and keep the service fair. | Until you delete your account. |
| Your answer about AI, and the version of the text you answered | To use AI only with your permission. | Until you delete your account. |
| Your subscription: product, store and expiry date, from Google Play through RevenueCat | To unlock Premium. | Until you delete your account. Google Play and RevenueCat keep their own records. |
| AI use: provider, model, tokens and cost per request | To keep AI spending within budget. | Kept without any link to you once you delete your account. |
| That a scan happened, and which catalog entry it matched | To count scans for your plan. | Until you delete your account. Label text and photos are not stored. |
| Emails you send us | To answer you. | As long as needed to help you. |
What stays on your phone
- Your calendar (Premium, only if you turn it on and allow it): the app reads today's events on your phone to tell their type, such as formal or gym, and their time. Titles, notes, attendees and places are never sent or stored; only each event's type, start time, length and how sure the app is about the type are sent with the pick.
- Label photos: the text on a label is read on your phone by Google's ML Kit. A photo leaves your phone only if you are on Premium, have allowed AI, and tap the button that asks AI to read it; it is shrunk first, which also leaves out the photo's metadata such as where it was taken, and we do not store it. ML Kit itself sends Google diagnostic data (device model and system version, app version, a per-installation ID, performance figures and settings such as image size); Google's list of what it collects does not include images or the text it reads.
- Your sign-in and your calendar choices are kept encrypted on your phone.
AI, only with your permission
If you allow it, ScentPulse sends an AI provider only this, to write your pick's reason or read a label:
- The names, brands and accords of up to three bottles from your shelf, and how well each matches today
- Today's weather in words
- The type of your main event
- If a scan finds no match in the catalog, the text read from the label, and the label's photo if you ask
Never your calendar's titles, notes or attendees, your location, or your name or email. It goes to OpenAI; Google Gemini is a backup for text, used only on Google's paid terms (it was not in use on 13 November 2026). Neither trains its models on it. OpenAI may keep requests for a limited time to detect abuse, under its own terms. Without AI you get the same pick with a shorter reason written by the app. You can change your answer at any time in the app's settings.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Our database, sign-in and server functions | Singapore |
| OpenAI | AI reasons and reading labels, with your permission | United States |
| Google (Gemini) | Backup AI for text, with your permission, on Google's paid terms only | United States and elsewhere |
| OpenWeather | The weather for the rounded area, asked by our server | United Kingdom and elsewhere |
| RevenueCat | Subscription status | United States |
| Google Play | App downloads and payments | Worldwide |
| Expo | App updates, downloaded with a random per-installation ID | United States |
| Cloudflare | This website, the waitlist, its bot check, and email to scentpulse.app addresses | Worldwide |
| Google (Gmail) | Our inbox, and sending your sign-in codes | Worldwide |
Each processes data only to provide its service to us. Because they work in several countries, your data may be processed outside your own; we rely on their data processing terms for that. We share data with nobody else unless the law requires it.
This website
This site sets no cookies of its own and has no analytics or ads. Cloudflare delivers and protects it, and processes your IP address and browser details to do so; it may set a strictly necessary security cookie when it has to check a visitor.
The waitlist
If you join the waitlist, we keep your email address, your optional answers (which plan you would pick, and whether you would like to test the app early), the version of the sentence you agreed to, and the dates. It is stored with Cloudflare. Before it is accepted, Cloudflare Turnstile checks that a person sent the form, using your IP address and browser signals. We use the list only to email you about ScentPulse's launch and, if you asked, early testing. Write to [email protected] to be removed at any time. We delete the list six months after the launch at the latest.
Deleting your account
In the app, open Settings and delete your account; without the app, use the deletion page. Your account and everything linked to it are deleted at once: your shelf, wear log, ratings, picks, answers, counts and subscription status, and your customer record at RevenueCat.
What remains: AI use records with no link to you; Google Play's own purchase records; if a subscription ever moved between accounts, the other account's record of that move, which names your account's ID; and the short-lived technical logs our providers keep. We keep no database backups today; if we add them, deleted data will leave them within 30 days.
Your rights
You can ask to see, correct, export or delete your data, to restrict or object to its use, and you can withdraw your permission for AI at any time. Write to [email protected]; we answer within 30 days. You can also complain to the data protection authority where you live.
Security
Everything travels over HTTPS. Each account can reach only its own rows in our database, sign-in uses one-time codes rather than passwords, and the session on your phone is encrypted.
Children
ScentPulse is for people aged 13 and over; it is not made for children under 13, and we do not knowingly collect their data. Where the law sets a higher age for agreeing to online services yourself (in parts of the EU it is up to 16), someone younger needs a parent or guardian to agree for them. If a child under 13 has given us data, write to [email protected] and we will delete it.
Changes
We change the date at the top when this policy changes. Before a significant change applies, the app tells you.