Last updated: September 10, 2026
PerfuMate is a workspace for perfumers, on the web at perfumate.app and as an Android app. This policy explains what data it handles, where that data lives, and what control you have over it.
Until you sign in, everything stays on the machine you are using. Your materials library, formulas, versions, stock levels, batches, costs and settings live in a local database on your own device, and nothing about them reaches us. You can use PerfuMate this way indefinitely: no account is needed to open the bench, build formulas, or browse the catalog.
Signing in turns cloud sync on. It is not a separate setting you switch on later, and there is no version of a signed-in account whose bench stays only on the device. From the moment you sign in, your materials, formulas, versions, batches, stock levels, costs and notes are copied to our servers (Supabase) and kept in step there: each row is sent within seconds of you changing it, and it keeps happening in the background while you work. That is what lets the same bench appear on your phone and your desktop.
Signing in with Google also shares your email address and basic profile with us. If you publish formulas or send messages in the community, that content is stored on our servers and shown to other users under your handle. Publishing is always a deliberate act and never a default: your stock levels, costs, suppliers and private notes are not part of anything you publish, even though they are synced to your own account.
Guest formulation work stays on this device. Community, AI Studio, cloud sync and confirming an import require an account. Website visit and campaign measurement are described below.
AI Studio is optional and runs on credits. When you use it, the brief you write and the relevant parts of your materials list and formulas are sent to our server and processed by the OpenAI API to compose the answer. That content is used only to answer your request. We keep a record of credits granted and spent on your account so the balance is correct; it holds no part of what you wrote.
Plans and AI plans bought on the web are sold by Lemon Squeezy, which is the merchant of record and handles payment and any sales tax or VAT. Purchases made inside the Android app are handled by Google Play. In both cases the payment is processed entirely by that provider: we never see or store your card details. What reaches us is which product was bought and which account it belongs to, so the plan or the credits can be applied.
Maceration reminders are scheduled locally on your device. We do not send marketing push notifications.
When a page on this site or the web app is opened, it records one line on our own server. This is the complete list of what that line holds:
The device class and the operating system are read from your browser's user agent and stored as those single words. The user agent string itself is not kept, and neither is your IP address, your location, your screen size or anything else your browser offers.
The line carries no identifier of any kind. It is not linked to an account even when you are signed in, it sets no cookie, and it stores nothing on your device beyond a flag that lasts until you close the tab so that one visit is not counted twice. It cannot be traced back to a person, and it is never shared with anyone.
Two moments inside the app are recorded, both on our own server and both for one purpose: knowing which parts of PerfuMate people reach and which stop them. When a feature that needs a paid plan is opened, and when somebody signs in, we store the time, the name of that feature or of the screen the sign-in started from, and — if you are signed in at that moment — the account it belongs to.
That is the entire record. It holds nothing about what you were making: no formula, no material, no amount, no note, no name. It is never shared, and it is deleted with your account.
If you arrive through a Reddit campaign link containing go=reddit
or rdt_cid, the web app loads Reddit's advertising pixel to measure
page visits and account registrations. A browser-local flag, pm-rdt,
keeps this enabled across sign-in redirects and later visits on that browser
until its site data is cleared. Ordinary visits without that flag do not load
the pixel.
These events are sent to Reddit. Its script may process browser, network and advertising identifiers under Reddit's privacy policy. We do not include your formulas, material list, notes, costs or suppliers in these events. This campaign measurement is separate from our own counters described above.
Specifically, we do not and will not:
If any of that ever changes, it changes here first, with a date.
You can delete your account and every piece of cloud data connected to it from inside the app: More > Account > Delete account. Details and alternatives are on the account deletion page.
PerfuMate is not directed at children under 13 and we do not knowingly collect data from them.
PerfuMate is operated by Omer Siton, Israel.
Questions or requests: PerfuMate.Support@gmail.com.
If this policy changes, the new version is published at this address with an updated date.