Privacy policy

I.Who we are

The controller of your data is Effluve’s publisher:

Publisher

[à compléter : raison sociale ou nom de l’entrepreneur]

Address

[à compléter : adresse postale]

SIREN (French company number)

[à compléter : SIREN]

Contact

[email protected]

For any question about your data, write to us at [email protected]. We reply within one month at most.

II.The data we process

Your account

• Your email address, required to sign in (sign-in link, Google or Apple).
• Your display name and profile photo, if you provide them or if Google or Apple share them with us when you sign in. With “Sign in with Apple”, you can hide your email address: we then only receive a relay address.
• Your username and bio, if you create a public profile.
• A photo you choose for your avatar: the app only accesses the image you select, never your whole photo library. It is cropped and its metadata (including any GPS location) is removed before it is saved.
• Your sign-in sessions: a session token (kept in your iPhone’s secure Keychain), and the associated IP address and device type, to keep your account secure.

What you keep in the app

• Your collection (“Own”) and, if you fill them in, the bottle size, the bottle’s condition, the purchase price and date, your rating and your personal notes.
• Your “Love” fragrances and your wishlist (“Want”).
• Your lists (name, description, fragrances), their share links, the collections you follow and their visibility settings (public, link only, private).
• Your scent profile: a numerical fingerprint computed from the fragrances in your collection, used to personalise the feed and the suggestions.
• Your “I’m wearing it” journal: the fragrance, the date, the activity you chose, the season, the rounded temperature and a weather condition code (e.g. “rain”). Never a place.

The answers you give the Advisor are sent to our servers while your suggestions are computed, without being stored there; your latest criteria stay only on your phone.

If you use “Chat” (the conversational advisor), we store your messages, the advisor’s replies and the fragrances it showed you, so that you can come back to the conversation, as well as a daily message counter (usage limit).

What you make public

If you create a profile, your username, display name, photo, bio and the collections you choose to make public are visible to everyone, in the app and on effluve.app (pages that search engines may index). A collection shared “by link” is visible to anyone who has the link, without an account. You can make a collection private or turn off a link at any time in the app. Your email address is never shown.

Reports and blocks

When you report a profile or a collection, we record who is reporting, the content concerned, the reason and any details you add, as well as the action taken by moderation. When you block someone, we record that block so as to hide your content from each other.

Clicks to retailers

When you tap an offer, we count the click anonymously (the offer, the screen it came from, the date), without linking it to your account.

Technical data

Like any online service, our servers keep technical logs (IP address, date, requested address, response code) for security and to diagnose outages.

What we do not collect

Not your precise location, your contacts, your photo library, your device’s advertising identifier, nor any payment or health data. Effluve uses no advertising trackers and no audience analytics tools.

III.Weather and location

For the “Sillage of the day”, the app can read your approximate location, only if you allow it, and only while the app is open. On your phone, this location is rounded to about 10 km (0.1°), then sent directly from your phone to the Open-Meteo weather service (open-meteo.com), which also sees your IP address. It is never sent to Effluve or stored.

Our servers only receive the weather summary (temperature, feels-like temperature, humidity, conditions, day or night) and the hemisphere, to pick the right season. You can withdraw the permission at any time in Settings › Effluve › Location on your iPhone: suggestions are then based on the season.

IV.Why, and on what legal basis

Contract

Creating your account and signing you in; keeping your collection, lists and journal; publishing your profile and sharing your collections; personalising the feed, the Advisor and the Sillage of the day. This is the service you ask for when you accept the terms of use.

Consent

Reading your approximate location for the weather, and accessing the photo you choose for your avatar. You grant these permissions in iOS and can withdraw them at any time, with no effect on the rest of the app. Sending your messages and your collection to the AI provider behind “Chat”: the app asks you explicitly before your first conversation.

Legitimate interest

Moderating public content and handling reports, protecting the service against abuse and fraud, keeping technical logs, counting affiliate clicks anonymously, replying to your messages.

Legal obligation

Responding to requests from authorised authorities, within the framework set by law.

V.Artificial intelligence

Some features rely on AI models, called through the OpenRouter service, which passes each request on to the model’s provider (for example Google or Anthropic).

• The Advisor’s reasons (“why this fragrance”): we send your answers to the questionnaire (occasions, seasons, families, notes, accords, intensity, cards chosen), the details of the suggested fragrances and, where relevant, the name of a fragrance from your collection or your “Love” list that the suggestion resembles.
• “Chat”, the conversational advisor, relies on Claude, a model by Anthropic, called directly (without going through OpenRouter), and only after your explicit consent in the app. We send it your messages and the conversation history, the date, the time and, if you have turned on the weather, a summary of the conditions (rounded temperature, sky). To answer you, it can look up the catalogue and, when your request calls for it, your collection (with your notes), your “Love” fragrances and the fragrances you wore most recently. Under its commercial terms, Anthropic does not use this data to train its models and keeps it only for a limited period.
• The moodboards, note illustrations and catalogue texts are produced from the fragrance catalogue data alone, without any data about you.

We never send your email address, your name, your username, your photo or an account identifier to these services.

VI.Who receives your data

Your data is only accessible to the Effluve team (to run the service and moderate it) and to the service providers below, each for its own task only:

Hetzner Online GmbH

Hosting of our servers, the database, profile photos and the website (Germany). It stores all the data described above, within the European Union.

Resend

Sending the email that contains your sign-in link: your email address and the link. (Resend, Inc., United States.)

OpenRouter

Access to AI models: only the items listed in section V, with no identifier. (OpenRouter, Inc., United States, and the provider of the model used.)

Anthropic

AI model behind “Chat”, if you use it: only the items listed in section V, with no identifier. (Anthropic, PBC, United States.)

Google

If you sign in with Google: Google confirms your identity and shares your email address, your name and your profile photo with us.

Apple

If you sign in with Apple: Apple shares your email address (or a relay address) with us and, the first time you sign in, your name.

Open-Meteo

Called directly by your phone, if you allow location: coordinates rounded to about 10 km and your IP address. Nothing goes through our servers.

Retailers

When you open an offer, your browser goes to the retailer’s website, sometimes via an affiliate network. We do not pass on any data about you; their own privacy policy then applies (for example, they may use cookies to attribute the sale).

The sources of the fragrance catalogue (Fragella, Fragrantica) receive no user data. We do not sell or rent your data, and we do not share it with any advertiser.

Some providers are based in the United States (Resend, OpenRouter, Anthropic, Google). These transfers are covered by the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

VII.How long we keep it

• Account, collection, lists, journal, profile: for as long as your account exists. They are erased as soon as you delete it.
• “Chat” conversations: until you erase them in the app, and at the latest when the account is deleted; the daily message counter, for as long as your account exists.
• Sign-in link: it expires 5 minutes after it is sent.
• Sessions: until you sign out or they expire, and at the latest when the account is deleted.
• Reports and blocks: as long as needed to handle them and to prevent repeated abuse; they are erased along with the account concerned.
• Technical logs: 12 months at most.
• Exchanges with support: as long as needed to handle your request, then 3 years at most.
• Location: never kept.

VIII.Deleting your account

In the app: the Profile tab, the Settings icon at the top right, then Delete my account at the bottom of the screen; type the confirmation word the app asks for to confirm. Deletion is immediate and permanent. It erases your account and sessions, the link with your Google or Apple account, your public profile, your collection and your notes, your “Love” fragrances, your wishlist, your lists and their share links (which stop working), the collections you followed, your “I’m wearing it” journal, your scent profile, as well as your reports and blocks.

Your profile photo stops being shown immediately, and its file is erased from our servers within 30 days. Affiliate clicks, which are already anonymous, are kept for our statistics.

No longer have access to the app? Write to [email protected] from your account’s email address: we will delete it for you. To also remove Effluve’s access on the Google or Apple side, go to your Google account’s security settings, or to Settings › [your name] › Sign in with Apple on your iPhone.

IX.Your rights

Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:

• Access: find out what data we hold about you and get a copy of it.
• Rectification: correct your data (most of it can be edited directly in the app, from your profile).
• Erasure: delete your account (see above) or a specific piece of data.
• Portability: receive your collection, your lists and your journal in a machine-readable format. In the app: Settings → Account → Export my data (a JSON file with everything we keep about you).
• Objection and restriction: object to processing based on our legitimate interest, or ask for it to be suspended.
• Withdrawal of consent: turn off access to your location or photos in your iPhone’s settings, at any time.
• Instructions after death: tell us what should happen to your data after you die.

To exercise these rights, write to [email protected]. We reply within one month and may ask you to confirm that the request really comes from your account’s email address. If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr/fr/plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).

X.Security

Traffic between the app, the website and our servers is encrypted (HTTPS). Your session token is kept in the iOS secure Keychain. Access to the administration tools is restricted to the Effluve team. There is no password to remember, so none to be stolen: you sign in with a single-use link, Google or Apple.

XI.Minimum age

Effluve is intended for people aged 13 and over. If you are between 13 and 15, use the app with the consent of a parent or of the person with parental authority. If we learn that an account belongs to a child under 13, we delete it. A parent can let us know at [email protected].

XII.The website and cookies

The effluve.app website sets no cookies and uses no audience measurement tool or third-party service (the fonts are hosted by us). Only your display preferences (light or Noir theme, site language), if you change them, are remembered in your browser; they never leave your device. The public pages (fragrances, profiles, shared collections) show data read from our database; our servers keep the technical logs described above.

XIII.Changes to this policy

If we change the way we process your data, we update this page and its date. For a significant change, we let you know in the app before it takes effect.