Who we are
This policy covers The Lucky Aroma app (“we”, “us”). It explains what the app collects and why. Our online store at theluckyaroma.com runs on Shopify and has its own privacy policy for orders placed there.
Questions about privacy: support@theluckyaroma.com.
What we collect
| Data | When | Why |
|---|---|---|
| Email address, name and account ID | When you create an account with email, Apple or Google | To sign you in and run your account |
| Profile photo | If you add one | To show on your profile |
| Your library: owned, wishlist, tried and custom lists | As you use the app | To keep your collection and sync it across devices |
| Ratings, votes, reviews, comments and reports | When you post or report | To run the community features and keep them safe |
| Photos you choose to import | Only when you use photo import | To recognise the bottles in the photo |
| Voice transcripts | Only when you use voice import | To match the fragrances you name |
| Purchase and subscription status | If you buy a subscription | To unlock what you paid for |
| Email preferences | When you opt in or out | To send only the emails you asked for |
| App usage events and crash reports | When analytics or crash reporting is switched on | To fix bugs and improve the app |
We don’t sell your personal data, and we don’t use it to track you across other companies’ apps or websites for advertising.
How we use it
- To provide the app: your account, library, lists, community posts and purchases.
- To send account emails such as verification and password resets, and marketing emails only if you opt in.
- To keep the community safe: reviewing reports, removing content and blocking abuse.
- To understand what is broken or confusing and improve the app.
- To meet legal obligations.
Service providers
We use these companies to run the app. They process data on our behalf and only for the purposes below.
- Cloudflare: hosting, our database and file storage for accounts, libraries, posts and profile photos.
- Apple and Google: Sign in with Apple, Google sign-in, in-app purchases, and the speech recognition your phone uses for voice import.
- OpenAI: recognising the bottles in a photo you choose to import. Only the photos you select are sent. We don’t store them, and we ask OpenAI not to store the request.
- Resend: sending account emails and, if you opt in, our newsletter.
- RevenueCat: managing subscription status when subscriptions are offered.
- Shopify: our store and checkout when you buy from the Shop tab.
- PostHog and Sentry: product analytics and crash reports, when switched on. Reports are linked to a pseudonymous account ID, not your name or email.
Public content
Reviews, comments, ratings and your display name are visible to other people in the app. Your library and lists are private. Don’t include personal details in posts that you wouldn’t want others to see.
Keeping and deleting your data
We keep your data while your account is open. You can delete your account at any time in the app (Library, then Settings, then Delete account) or from the web on our delete account page.
Deleting your account removes your profile, library, lists, ratings, votes, sign-in records and profile photo. You choose whether your reviews and comments are deleted too; if you keep them, they stay up as “Deleted user”. We may keep limited records where the law requires it, such as purchase records, and copies in backups are overwritten on a rolling basis.
Your choices
- Change your profile and email preferences in Settings.
- Unsubscribe from marketing emails with the link in any email.
- Ask us for a copy of your data, or to correct or delete it, by emailing support@theluckyaroma.com.
- Depending on where you live, you may have further rights under laws such as the GDPR or CCPA. We’ll respond within the time those laws set.
Age
The Lucky Aroma is for adults aged 18 and over. We don’t knowingly collect data from children. If you believe a child has created an account, contact us and we’ll delete it.
Security
Data is encrypted in transit, access to our systems is restricted, and passwords are stored only as secure hashes. No system is perfectly secure, so please use a strong, unique password.
Changes and contact
If we change this policy we’ll update the date at the top, and tell you in the app for significant changes. Contact us any time at support@theluckyaroma.com.