PerfuMate Privacy Policy

Who is responsible for your data

The controller is PerfuMate, a business operated by Omer Siton, Israel. Email: PerfuMate.Support@gmail.com. Write to that address with any question or request about your data.

Data that stays on your device

Until you sign in, everything stays on the machine you are using. Your materials library, formulas, versions, stock levels, batches, costs and settings live in a local database on your own device, and nothing about them reaches us. You can use PerfuMate this way indefinitely: no account is needed to open the bench, build formulas, or browse the catalog.

What changes when you sign in

Signing in turns cloud sync on. It is not a separate setting you switch on later, and there is no version of a signed-in account whose bench stays only on the device. From the moment you sign in, your materials, formulas, versions, batches, stock levels, costs, notes and AI Studio history are copied to our servers (Supabase) and kept in step there: each row is sent within seconds of you changing it, and it keeps happening in the background while you work. That is what lets the same bench appear on your phone and your desktop.

Your account holds your email address. If you sign in with Google, Google also shares your basic profile (name and picture) with us. We use the name only to suggest a handle and display name, which you can change, and we do not show the picture.

Guest formulation work stays on this device. Community, AI Studio, cloud sync and confirming an import require an account. Website visit and campaign measurement are described below.

Community

If you publish formulas or send messages in the community, that content is stored on our servers and shown to other users under your handle. Published formulas also appear on public pages of perfumate.app that search engines can index, unless your profile is private. Publishing is always a deliberate act and never a default: your stock levels, costs, suppliers and private notes are not part of anything you publish, even though they are synced to your own account.

Messages are stored on our servers so they reach the other person. We do not read them, except to look into a report, abuse or a security problem, or when the law requires it. Reports you make are seen only by us.

AI Studio

AI Studio is optional and runs on credits. When you use it, the brief you write and the relevant parts of your materials list and formulas are sent to our server and processed by the Anthropic API to compose the answer. Under its commercial terms, Anthropic does not use this data to train its models, and deletes it within 30 days. We keep a copy of each answer for 24 hours, then delete it.

We keep a record of credits granted and spent on your account so the balance is correct, and a record of what each run cost us (the model and the amount of text processed). Neither holds what you wrote.

If you rate an answer with the thumbs, we store your question, the answer, the formula's material names and shares, and any reason you give, to improve AI Studio.

Lab Mate (voice)

Lab Mate, where offered, is an AI voice assistant in the web app's formula editor. It is not in the Android app.

• The microphone is used only while a Lab Mate call is active, and only after you start the call yourself. It stops when the call ends.
• During the call, your voice is streamed live to our AI provider, currently OpenAI, so it can hear you and answer. AI providers for voice may include Google (Gemini) where offered. The voice you hear is generated by AI; you are talking to an AI, not a person.
• The relevant parts of your formula and materials are sent along so Lab Mate can talk about them. What you say may pass through our server as text to prepare a change to your formula.
• We do not record or keep your audio or a transcript. We keep only a record that a proposed change was approved, and the credits it used. The provider processes the audio under its API terms, and we use provider settings under which it is not used to train their models.

PerfuMate in ChatGPT and Claude

PerfuMate offers a free app inside ChatGPT and Claude that looks up perfumery materials and checks a formula against IFRA and the EU allergen rules. It needs no PerfuMate account, and it runs only when you use it.

• When you use it, the assistant sends our server what the tool needs: the material you asked about, or the formula you asked it to check (material names, amounts and dilutions) and the concentration. We use this only to work out the answer and send it back.
• We do not store these questions or formulas, link them to a PerfuMate account, or use them for anything else.
• Our hosting providers keep standard request logs, which can include your IP address and the time of the request, for security and troubleshooting, and delete them within 30 days.
• The conversation itself is handled by OpenAI or Anthropic under their own privacy policies.
• A link the app gives you opens the formula in PerfuMate; what happens there is covered by the rest of this policy.

If you link your PerfuMate account (available with PerfuMate Unlimited and the AI Studio plans), the assistant can also read and change your own bench: formulas and their versions, your shelf and stock, batches, notebooks, the shopping list and a few preferences.

• You link it yourself, on perfumate.app, after signing in; the page names the assistant asking. The assistant receives an access token for your account, never your password. You can disconnect it at any time at perfumate.app/oauth/consent or in the assistant's settings.
• What the assistant reads from your bench goes into your conversation, which OpenAI or Anthropic handle under their own policies. What it changes is saved to your account and appears on your devices, as if you had made the change there.
• Deleting needs your confirmation in the chat, and deleted items stay restorable for 30 days in Recently deleted.
• For security, abuse limits and support we keep a log of these calls: which tool, when, which assistant, whether it worked, and the ids of what it created or deleted. Not the contents of your formulas or notes. We delete each entry after 90 days, or with your account.

Purchases

Plans and AI plans bought on perfumate.app are sold by Lemon Squeezy, which is the merchant of record and handles payment and any sales tax or VAT. The payment is processed entirely by Lemon Squeezy: we never see or store your card details. What reaches us is which product was bought, when, the order and subscription numbers, the amount, and the email and account it belongs to, so the plan or the credits can be applied and we can find your order if you write to us.

Where purchases are offered inside the Android app, payment is handled by Google Play, not the website checkout. We receive the product identity, purchase token, verified purchase or subscription state and expiry, and an obfuscated account identifier derived from your PerfuMate account ID. We keep these to verify, apply, restore and reconcile your purchase. Google handles your payment details; PerfuMate does not receive your card or bank details.

Emails we send

We send email from PerfuMate.Support@gmail.com, through Google's Gmail.

• Account and service emails: a sign-in or confirmation code, a welcome when you sign up, confirmation of a purchase, replies to your messages, and notices about your account, your plan or these policies.
• Reminders and product news: tips when you are getting started, a note when you reach a limit of your plan, and news about features, plans and prices.

Which reminder you get, if any, depends on your account activity: counts such as how many formulas or materials you have, whether you reached a plan limit, and when you signed up or last signed in. We never read or quote the contents of your formulas or materials in these emails.

Every reminder and product email has an unsubscribe link. One click stops them, with no sign-in needed. Account and service emails still arrive, because the service needs them.

When you unsubscribe, we keep your email address on a do-not-mail list, only so we can honour your choice. It stays there even if you delete your account. We also keep a log of which reminder emails your account received, so you do not get the same one twice; it is deleted with your account.

Support email and suggestions

When you write to PerfuMate.Support@gmail.com, your message and address are kept in that Gmail inbox. We may use AI tools, currently from OpenAI, to help sort messages and draft replies, and we keep a private record of each request and its status. Suggestions you send from the app (a wish, or a material to add) are stored on our server with your account and emailed to the same inbox.

Counting visits

When a page on this site or the web app is opened, it records one line on our own server. This is the complete list of what that line holds:

• the time
• the path of the page that was opened, without any query string
• the name of the site you came from, if any: the host only, never the full address. The one exception is a link from one of our own pages into the bench, where we keep our own path, because the whole purpose of that line is to know which of our pages people open the bench from
• a device class: phone, tablet or desktop
• whether that device runs iOS or Android, when it is a phone or tablet
• whether the visit began at a button on one of our pages or a link in one of our emails, and which one

The device class and the operating system are read from your browser's user agent and stored as those single words. The user agent string itself is not kept, and neither is your IP address, your location, your screen size or anything else your browser offers.

The line carries no identifier of any kind. It is not linked to an account even when you are signed in, it sets no cookie, and it stores nothing on your device beyond a flag that lasts until you close the tab, so that one visit is not counted twice. It cannot be traced back to a person, and it is never shared with anyone.

What the app records about using it

Some moments inside the app are recorded on our own server, to learn which parts of PerfuMate people reach and where they stop. They are: opening a feature that needs a paid plan; reaching a limit of your plan; signing in, and the screen it started from (also when the sign-in goes through Google); exporting a file (its type only); creating your first formula; saving a community formula to your bench; and the choices on the start screen. Around a purchase, they are: viewing the plans or the AI plans; the plan or offer you pick and the price shown; how long the plans stayed open; pressing Continue; whether the checkout page opened, or why it could not (for example no answer in time, or a price that had changed); and coming back from the checkout page (how many minutes later, and whether through the paid return). Each record holds the time, the name of the moment, sometimes a few small numbers (such as how many formulas you had when you reached a limit, or a price in cents), and, if you are signed in, your account.

If you allowed measurement and used the app as a guest on this browser before creating an account, the first sign-in adds one record to your account that sums up that guest use: how many moments were recorded, how many minutes before, and the furthest step reached (a paid feature, the plans, or Continue). The guest records themselves stay without an account.

It holds nothing about what you were making: no formula, no material, no note, no name. It is never shared. Like the counts in the emails section, it can decide which reminder email you get. When you delete your account, the link to your account is removed and the rest stays as an anonymous count.

Where you came from

Only if you allow measurement (in the privacy choices every page offers), your browser keeps a note of how you got here: the campaign tags in the link (such as utm_source or go), the page you landed on, the site you came from (host only) and the date. It is stored in your browser as pm-first and pm-last. If you create an account, that note is saved with your account, so we know which pages and campaigns bring people who stay. It is deleted with your account. A sign-in or payment page (Google, Apple, our sign-in provider, Lemon Squeezy, Stripe or PayPal) is never counted as where you came from. Your browser also counts how many times it opened our pricing page, as pm-pricing. The browser forgets it when you sign in; if that sign-in created your account, the number is first saved once with it.

With measurement allowed, your browser also keeps a random identifier, pm-vid, for up to 13 months. It records on our server, once each, that this browser visited the site and that it opened the web app, together with the note of how you came. If you create an account on that browser, the identifier is saved with your account, so we can see which pages and campaigns lead to sign-ups and purchases. It holds no name, email or anything you made, and these visit records are deleted after 13 months.

Whether you signed up on the web or on Android is saved with your account either way. If you do not allow measurement, or withdraw it later, these notes are deleted from your browser and nothing about where you came from is saved.

Cookies and storage on your device

• Necessary. The app keeps your bench, settings and sign-in session in your browser's storage (or on your phone), and the site keeps a flag for the length of a visit so it is counted once. Also necessary:
  • pm-consent-v2: your privacy choices, so we do not ask on every page.
  • pmCheckoutOut: the time you left for a checkout page, and which checkout, so the app can confirm your purchase when you come back and record the return. It is deleted the next time the app opens and is ignored after two hours.
  • pm-visits and pm-install: how many of our pages this browser opened, and whether you installed or dismissed the offer to install the web app, so the offer appears once, from the second page on.
  PerfuMate needs these to work, and no one else reads them.
• Measurement, only with your permission. pm-first, pm-last, pm-pricing and pm-vid, described above, and two short-lived notes the app keeps so a moment can be recorded after the page has been away:
  • pmGuestRows: how many moments were recorded while you used the app as a guest, since when, and the furthest step. It is used once, at your first sign-in on that browser, and then deleted.
  • pmAuthDoor: the screen a Google sign-in started from, so the return can record it. It is deleted the next time the app opens and is used for at most 15 minutes.
  They are ours alone and never go to a third party.
• Advertising measurement, only with your permission. Google advertising measurement and Reddit campaign measurement, described below. No personalised ads.

Measurement and advertising measurement stay off until you allow them. Your choices are kept on that browser for up to six months, and then we ask again. You can change them at any time with "Privacy choices" next to the privacy link at the foot of our pages, under More in the web app, or with the button below. Withdrawing permission deletes these notes from your browser and stops future measurement, but cannot recall data already sent.

Privacy choices

If your browser sends Global Privacy Control, advertising measurement stays off unless you switch it on yourself. Browsers' Do Not Track signal changes nothing here, because optional measurement stays off until you allow it.

Optional Google advertising measurement

With your permission, we load Google's advertising tag to measure purchases from our ads. It uses advertising cookies and browser, network and ad-click identifiers. After verifying a paid purchase, we send its order identifier, value after discounts and excluding tax, and currency to Google Ads. We do not include your name, email, formulas or other laboratory data. Advertising personalisation and enhanced conversions are not enabled by this integration. You can decline without affecting the app. See Google's privacy policy.

Reddit campaign measurement

Only if you allow advertising measurement, and only when you arrive through a Reddit campaign link containing go=reddit or rdt_cid, does the web app load Reddit's advertising pixel, which measures page visits, account sign-ups and file exports (sent as a "Lead" event), so we can tell whether the ads work. A browser-local flag, pm-rdt, remembers that you came from a Reddit campaign, so measurement you allowed carries across sign-in redirects and later visits on that browser. If you decline or withdraw, the pixel does not load, and the flag and Reddit's cookie are removed. Ordinary visits without that flag never load the pixel.

Reddit's script may process browser, network and advertising identifiers under Reddit's privacy policy. We do not include your formulas, material list, notes, costs or suppliers in these events. This campaign measurement is separate from our own counters described above.

Why we use your data (legal basis)

For people in the EU and the UK, each use rests on one of these legal bases.

Who else handles your data

• Supabase: hosting, sign-in and our database.
• Google: Google sign-in, if you use it; Firebase Hosting, which serves the website and the web app; Google Play, for Android purchases where offered; Gmail, which sends and receives our email; fonts.gstatic.com, which serves the web app's default and fallback fonts to your browser (the rendering engine itself is served from our own site); and Google Ads measurement, only with your consent. AI providers for voice may include Google Gemini, where offered.
• Lemon Squeezy: merchant of record for website purchases: payment, tax, receipts, subscriptions and the billing portal.
• Anthropic: AI Studio requests; and Claude, which passes your request to us when you use PerfuMate inside it.
• OpenAI: Lab Mate voice, streamed live during a call; the AI tools that help us sort and answer support email; and ChatGPT, which passes your request to us when you use PerfuMate inside it.
• Reddit: campaign measurement, only with your consent.
• cdnjs (Cloudflare) and jsDelivr: they serve code libraries to your browser: the PDF tools on the IFRA check page when you read or make a PDF, the sign-in library of the page where you link an assistant, and Lab Mate's speech recognition. Hugging Face serves the speech recognition model Lab Mate downloads to your browser. Each sees your IP address and the file requested, as any website you load a file from does, and nothing from your bench.
• IndexNow (Bing and other search engines): we tell them when a public page on perfumate.app changes. This sends page addresses only, never personal data.
• Other users: what you publish, your handle, display name and bio, and the messages you send them.
• Authorities: only when the law requires it.

These providers act on our instructions, with two exceptions: Google and Reddit, for their own advertising measurement when you allow it, and Lemon Squeezy, which as merchant of record is responsible for the payment data it collects. Google Play also handles Android payment data under its own terms and privacy policy.

International transfers

We are based in Israel, which the European Commission recognises as protecting personal data adequately. Our providers may process data in the United States and other countries. Where data goes to a country without such a decision, we rely on the European Commission's Standard Contractual Clauses (with the UK addendum) in the provider's data processing terms, or on the EU-U.S. Data Privacy Framework where the provider is certified under it.

How long we keep it

• Your bench (materials, formulas, versions, batches, notes, AI Studio history), your profile, posts and messages: while your account exists. Deleted with your account.
• Usage records: linked to your account while it exists; after that, kept only as anonymous counts.
• Where you came from: with your account, until you delete it.
• Visit identifier: pm-vid in your browser for up to 13 months; the visit records it made on our server, 13 months.
• Measurement notes in your browser, all deleted when you reject or withdraw measurement: pm-first, pm-last and pm-pricing until you sign in (saved with a new account) or clear this site's data; pmGuestRows until your first sign-in on that browser; pmAuthDoor until the app next opens. pmCheckoutOut, which is necessary, also until the app next opens.
• AI answers: 24 hours. Credit records and AI ratings: until you delete your account. AI cost records (no content): kept for our accounts.
• Visit counts: kept as statistics; they identify no one.
• PerfuMate in ChatGPT and Claude: without a linked account, nothing stored; our hosting providers' request logs, up to 30 days. With a linked account, the call log above, 90 days.
• Purchase records: while your account exists. Lemon Squeezy and Google Play keep their own records under their payment and legal retention requirements. After account deletion, we permanently retain only hashes of the Google Play purchase token and obfuscated account identifier, plus the deletion date, to prevent reuse of a deleted account's purchase. The original token, account UUID, order number and product details are removed from our Play receipt store.
• Reminder email log: until you delete your account. Do-not-mail list: kept for as long as we send email, so your choice is honoured.
• Support email: as long as needed to deal with your request and any follow-up.
• Your privacy choices: on your browser, up to six months.
• Backups: overwritten on our hosting provider's normal rotation.

Your rights

You can ask us to:

• access your data: tell you what we hold and give you a copy;
• correct it if it is wrong (most of it you can edit yourself in the app);
• delete it (see below);
• port it: More > Account > Export as ZIP gives you your whole bench as CSV and JSON, free, at any time;
• object to any use based on legitimate interests, including reminder and product emails (the unsubscribe link does this at once);
• restrict a use while a complaint about it is looked at;
• withdraw consent to measurement or advertising measurement at any time, with "Privacy choices". This does not affect what happened before.

In Israel, the Privacy Protection Law gives you the right to review the data held about you and to ask for it to be corrected or deleted.

To use any of these rights, email PerfuMate.Support@gmail.com from your account's address. We may ask you to confirm it is you. We answer within one month; if a request is complex we may need up to two more months, and we tell you why.

If you are unhappy with our answer, you can complain to a data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner's Office; in Israel, the Privacy Protection Authority. You are welcome to contact us first.

Do you have to give us data?

No. Everything here is voluntary. You can use PerfuMate as a guest, with no account, and your bench never leaves your device. An email address is needed only to create an account; without one you cannot use cloud sync, the community or AI Studio. A display name, a bio and anything you publish are optional.

What we do not do

Specifically, we do not and will not:

• sell, rent or trade your data to anyone, for any purpose
• show third-party ads inside PerfuMate
• send your formulation data to advertising services
• access files on your device unless you select them for an import or attachment
• use the contents of your formulas, materials, notes, batches, costs or suppliers for anything other than showing them back to you, syncing them between your own devices, and running the AI features you ask for, including an answer you choose to rate. Counts of what you hold can decide which reminder email you get, as described above
• give your bench data to anyone to train their AI models

If any of that ever changes, it changes here first, with a date.

Deleting your data

You can delete your account and the cloud data connected to it from inside the app: More > Account > Delete account. Details and alternatives are on the account deletion page.

A few things stay, by design: an email address you unsubscribed stays on the do-not-mail list; usage records stay as anonymous counts; visit records made under a browser identifier stay, no longer linked to you, until they expire after 13 months; AI cost records stay, with no content; Lemon Squeezy keeps its own purchase records; backups are overwritten on their normal rotation; and a public formula page comes down at the next site update. Formulas other users saved to their own bench before you deleted stay on their bench.

For Google Play purchases, only purchase-token and obfuscated-account hashes and the deletion date remain permanently as an anti-reuse record. We remove the original token, account UUID, order number and product details from our Play receipt store. Google keeps its own payment records.

Children

PerfuMate is not for anyone under 16, and we do not knowingly collect data from children under 16. If we learn that an account belongs to someone under 16, we delete it. If you think a child is using PerfuMate, tell us at the support address.

Contact

Questions or requests: PerfuMate.Support@gmail.com.

Changes

If this policy changes, the new version is published at this address with an updated date.

Terms of Service · Refund policy · Cancel a subscription