Privacy Policy

What we collect

Only what the app needs to work:

• Your email address and password. Used to create your account and sign you in. Passwords are stored only as salted hashes by our authentication provider; we never see them.
• Content you enter. The rooms and machines you set up, the scents you log, dates, notes, and any custom scents you add to your own library.
• Photos you upload. A profile photo, and photos attached to individual logs. Images are resized and compressed on your device before upload.
• Basic technical data. Standard server logs from our hosting providers, such as IP address and timestamps, kept for security and abuse prevention.

What we do not collect

Aroma contains no advertising and no third-party analytics or tracking SDKs. We do not collect your location, contacts, health data, or device identifiers for advertising. We do not sell or rent your data, and we do not share it with data brokers.

Where your data is stored

Account records, your logs, rooms, and custom scents are stored in a hosted Postgres database provided by Supabase. Uploaded photos are stored in Supabase Storage. The public website and web version of the app are served by Netlify. These providers process data on our behalf as service providers, under their own security and privacy terms.

What other people can see

Aroma is personal first. Your library, rooms, and logs are private to your account unless you choose to make a log public or export a share card. Anything you make public — including any photo attached to it — can be seen by other people in the app. Your email address is never shown to other users.

Deleting your account

You can delete your account from inside the app at any time: open Settings, scroll to the bottom, and tap Delete account. You will be asked to type DELETE to confirm.

Deletion is permanent and immediate. It removes your login, your profile, your rooms, your logs, the custom scents you created, and every photo you uploaded, including any logs you had made public. It cannot be undone and there is no recovery window. Backups held by our hosting providers roll off on their own retention schedule, normally within 30 days.

If you cannot access the app, email support@aromalog.app from the address on the account and we will delete it for you.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Most of this is already in your hands: you can view and edit your content in the app, and delete everything from Settings. For anything else, email support@aromalog.app and we will respond within 30 days.

Children

Aroma is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

Changes to this policy

If this policy changes in a way that affects you, we will update the date at the top of this page and, for significant changes, note it in the app.

Contact

Questions about privacy, or a request about your data: support@aromalog.app.