Privacy Policy

Effective July 4, 2026

This Privacy Policy explains what Scentuary (“we,” “us”) collects when you use scentuary.me, how we use it, and the choices you have. By using the Service you agree to this policy and to our Terms of Service.

Information we collect

You give us

• Account data — your name, username, email address, and a salted hash of your password (never the password itself). You may optionally add a bio and profile image.
• Content you create — collection entries, wear-log journal entries, reviews and ratings, lists, itineraries, comments, follows, saves, perfume submissions, and any images you upload.
• AI prompts — messages you send to the in-app AI assistant.

Collected automatically

• Technical / log data — IP address, browser type, and request metadata processed by our hosting and security layer (for example, our load balancer and web-application firewall) to operate and protect the Service.
• Error diagnostics — if the app encounters an error, we may send diagnostic details (such as a stack trace and the affected URL) to our error-monitoring provider (Sentry) to fix problems.

How we use your information

• to provide, personalize, and maintain the Service;
• to generate AI recommendations, which weight your onboarding preferences and query;
• to send you essential account emails (password reset, email verification, and security notices) via our email provider;
• to keep the Service secure — detecting abuse, spam, and unauthorized access, and enforcing rate limits;
• to comply with legal obligations.

Cookies

We use a single essential, first-party cookie to keep you signed in (your authentication session). We do not use advertising cookies, cross-site trackers, analytics profiling, or session-replay. Because we use only strictly necessary cookies, no consent banner is required in most jurisdictions; if we ever add optional analytics or marketing cookies, we will ask for your consent first.

Service providers we share with

We do not sell your personal data. We share data only with vendors that process it on our behalf to run the Service:

• Amazon Web Services — hosting, the Postgres database (RDS), image storage and delivery (S3 and CloudFront), transactional email (SES), and AI inference (Bedrock).
• Sentry — error monitoring and diagnostics.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of our users.

What’s public

Your profile and the content you mark public (reviews, public lists and itineraries, follows) are visible to others and may appear on catalog pages. Lists and itineraries you set to private or unlisted are not shown publicly. Consider what you share.

Your rights and choices

• Access & export — you can export your journal, collection, and reviews from your settings.
• Correction — edit your profile and content anytime.
• Deletion — delete your account from settings; this removes your account and associated content from our systems (backups are purged on their normal cycle). This is your right to erasure under the GDPR/CCPA.

Depending on where you live, you may have additional rights (objection, restriction, portability, non-discrimination). Contact us to exercise them.

Data retention

We keep your data while your account is active. When you delete your account, we delete your personal data and content, except limited copies in routine backups (retained for a short window) or where we must retain it to comply with law or resolve disputes.

Security

We use encryption in transit (TLS), a verified database connection, hashed passwords, scoped access controls, and a web-application firewall. No system is perfectly secure, but we work to protect your data.

Children

Scentuary is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

International transfers

Our infrastructure is hosted in the Asia Pacific (Singapore) region. If you use the Service from elsewhere, your data is processed there.

Changes

We may update this policy; we will change the effective date above and, for material changes, notify you where appropriate.

Contact

Questions or requests? Email privacy@scentuary.me.