last updated: 07.09.2026
Scented.ai is operated by Evgenii Razinkov pr Novi Sad, with registered address at Mite Ružića 2, Novi Sad, Serbia (matični broj: 67620046; PIB: 114493269).
For any privacy-related enquiries, contact us at support@scented.ai.
At scented.ai, we prioritize the privacy and protection of our users' data. We may collect and generate data about the use of the Service, which may include:
Personal Information:
Note on Sign in with Apple: If you choose to sign in using Sign in with Apple, Apple may provide us with a private relay email address on your behalf rather than your real email address. We use this address only to communicate with you and manage your account.
Note on Sign in with Google: If you choose to sign in using Google Sign-In, we receive your email address and display name from Google for account creation. We do not store your Google credentials or password. Your Google profile picture URL is used temporarily during the session and is not stored permanently.
Usage Information:
How We Collect This Data
The primary goal of collecting this data is to enhance the user experience on scented.ai by:
Legal Basis for Processing
Where required by applicable law (including for users in the EU, EEA, and Serbia), we process your personal data on the following legal bases:
Analytics and advertising measurement rely on identifiers stored on or read from your device — the Firebase app instance ID and, on Android, the advertising identifier. This processing begins when you first open the app, on the basis of our legitimate interest in understanding how the Service is used and how our own advertising campaigns perform. You can prevent the advertising identifier from being available to us at any time using the device controls described under Advertising Identifier below, and you may object to this processing by contacting us at support@scented.ai.
Our core service uses automated processing of your personal data — including your perfume collection, ratings, and preferences — to generate personalised scent recommendations. This constitutes profiling within the meaning of GDPR Article 4(4) and Serbian PDPL.
The recommendations generated are algorithmic and are not solely determinative of any significant decision affecting you. You have the right to object to this profiling at any time by contacting us at support@scented.ai. Please note that opting out of profiling will significantly limit the core functionality of the Service.
We take the security of your data seriously and employ the following measures:
We have entered into Data Processing Agreements (DPAs) with RevenueCat, PostHog, and Hetzner Online GmbH in accordance with GDPR Article 28 and Serbian PDPL Article 45. We are working to put equivalent agreements in place with Google (Firebase Analytics / Google Ads), Sentry, Expo, and Vercel (website hosting and analytics) as these integrations are rolled out.
Despite these measures, no method of internet transmission or electronic storage is completely secure. If you have concerns about your data security, please contact us at support@scented.ai.
Access: Users have the right to request details about the data we hold on them.
Correction: Users can edit or update their personal data through their account settings at any time.
Erasure (Right to Deletion): You have the right to erasure of your personal data under GDPR Article 17. To exercise this right, delete your Scented.ai account from within the app: go to account settings and select Delete Account. You will receive a confirmation email with a secure link; clicking that link starts the deletion process.
Important — cancel your subscription first: Before deleting your account, you must cancel any active Pro subscription through your device's App Store or Google Play subscription settings to avoid future charges.
Exception — billing records: Transaction IDs, purchase receipts, and billing records associated with your Pro subscription are subject to legal retention requirements (minimum 7 years from the transaction date) and cannot be fully deleted within that period.
Portability: You have the right to receive your personal data in a structured, machine-readable format, and to request that we transmit it to another service where technically feasible.
Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
Objection: You have the right to object to processing based on our legitimate interests, including profiling for personalised recommendations.
Complaints: If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. For users in Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). For EU/EEA users, contact your national DPA.
To exercise any of these rights, email us at support@scented.ai. We will respond within 30 days.
California residents: Under the CCPA/CPRA, you have the right to know what personal data we collect, the right to correct inaccurate information, and the right to request deletion. Scented.ai does not sell your personal data. We do not share your personal data for cross-context behavioural advertising: our use of advertising identifiers is limited to measuring the performance of our own campaigns, as described under Analytics and Advertising Measurement below, and is not used to target advertising at you across other services.
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law.
Account data (email, username, country, gender, date of birth where collected, perfume collection, ratings, photos submitted for perfume recognition search): Retained for the lifetime of your account. Deleted within 30 days of a valid account deletion request.
Pro subscription and billing records (transaction IDs, purchase receipts, billing status, renewal dates): Retained for a minimum of 7 years from the transaction date, as required by applicable tax and accounting laws.
Usage and analytics data (app usage, log data, IP addresses, PostHog analytics): Retained for up to 24 months, after which data is aggregated or deleted.
Guest session data (device identifier and the activity recorded against it before registration): Retained indefinitely — we do not currently apply an automatic expiry to guest session data, and it is not linked to any account you may later create. It is deleted only at your request. See Guest Mode below.
Advertising measurement data (Firebase app instance ID, advertising identifier, and conversion events held by Google): Subject to the retention period configured in our Google Analytics property and to Google's own retention policies. See policies.google.com/privacy.
Shared list pages: A shared list remains publicly accessible until sharing is disabled for that list or your account is deleted. See Public Sharing of Lists below.
RevenueCat subscription data: Also subject to RevenueCat's own retention policy. See revenuecat.com/privacy for details.
Scented.ai does not sell or rent user data to third parties. Data may be shared with the specific service providers named in the Third-Party Integrations section below solely for the purpose of enhancing the platform's functionality or as required by law. We put Data Processing Agreements in place with our third-party processors; see Data Protection above for the current status of those agreements. Separately, you can choose to publish a perfume list yourself by creating a share link — see Public Sharing of Lists below.
Scented.ai uses the following third-party service providers. Each processes your personal data only as instructed by us, under a Data Processing Agreement where one is in place — see Data Protection above for the current status of those agreements.
PostHog: We use PostHog as an analytics tool to better understand user interactions within our native iOS and Android applications, on our server, and on our website. In addition to the App User ID, we share your email address and username with PostHog so that your in-app activity can be linked to your account for support and analytics purposes. Within our native apps and on the server, PostHog does not set cookies in your browser. On our website, PostHog runs in cookieless mode: it does not set cookies or other identifiers on your device and does not record your browsing sessions; visitors are counted using a short-lived server-derived identifier. We rely on legitimate interests (Article 6(1)(f) GDPR) for this analytics processing. PostHog processes website and server data exclusively on servers located within the EU. For full details, see posthog.com/privacy.
Vercel: Our website is hosted on Vercel, and we use Vercel Web Analytics and Speed Insights to measure page views, performance, and how visitors move through the site. Vercel Web Analytics is cookieless and does not identify individual visitors. Vercel Inc. is based in the United States. For details, see vercel.com/legal/privacy-policy.
Firebase Analytics / Google Analytics 4 (Google): Starting with the current version of the app, we use Firebase Analytics (GA4), provided by Google LLC, to understand app usage and performance and to measure the results of our own advertising campaigns. Firebase collects device and app-instance identifiers and usage events. See Analytics and Advertising Measurement below for exactly which events we send and how they are linked to Google Ads. For details on Google's own processing, see firebase.google.com/support/privacy.
Google Ads (Google): We advertise Scented.ai through Google Ads. Our GA4 property is linked to our Google Ads account so that conversions — installs, sign-ups and subscriptions — can be attributed to the campaign that produced them, and so that Google Ads can optimise the delivery of our campaigns. Google LLC is based in the United States. For details, see policies.google.com/privacy.
Sentry: We use Sentry to monitor app stability and diagnose crashes. When the app crashes or encounters an error, technical information (such as device state and a stack trace) is sent to Sentry to help us identify and fix the issue. For details, see sentry.io/privacy.
Google Sign-In: We use Google Sign-In as an optional authentication method. When you sign in with Google, Google shares your email address and display name with us to create or identify your account. Google LLC acts as an independent data controller for your Google account data.
RevenueCat: We use RevenueCat to manage Pro subscription entitlements, available billing cycles and purchase validation. RevenueCat collects and processes your App User ID, store platform, billing country, and purchase history. RevenueCat is based in the United States. For full details, see revenuecat.com/privacy.
Expo (Expo push notifications): We use Expo's push notification service, provided by 650 Industries, Inc. (United States), to deliver notifications to your device. Expo receives your push notification token and the content of the notification, and relays it to Apple's or Google's push infrastructure. It does not receive your account details. For details, see expo.dev/privacy.
Hetzner Online GmbH: Our server infrastructure is hosted on dedicated hardware provided by Hetzner. Hetzner acts as a data processor for infrastructure purposes only and does not access your personal data in an identifiable form.
Payment Processing: Scented.ai does not collect or store payment card information. All Pro subscription payments are processed directly by Apple Inc. (via the App Store) or Google LLC (via Google Play). Apple Inc. and Google LLC act as independent data controllers in relation to your payment credentials. Scented.ai receives only confirmation of a successful or failed purchase and your resulting subscription status.
Scented.ai is available globally, and some of the third-party service providers we use are based outside the European Economic Area (EEA) and Serbia. In particular, RevenueCat, Inc. is based in the United States and processes subscription and purchase data on our behalf. In the current version of the app, Google LLC (Firebase Analytics / GA4 and Google Ads), Sentry, and Expo (650 Industries, Inc.), all also US-based, process device, advertising, diagnostic and push notification data on our behalf. This means that analytics and advertising measurement data — including your device identifiers and the conversion events described below — is transferred to and processed in the United States. Our website host, Vercel Inc., is also US-based and processes website request data (including IP addresses) and cookieless analytics on our behalf.
PostHog, our analytics provider, processes data exclusively on servers located within the EU and does not transfer your personal data outside the EEA.
Where personal data is transferred to a country not recognised as providing an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
You may request more information about the applicable transfer mechanisms by contacting us at support@scented.ai.
We advertise Scented.ai through Google Ads, and we measure how those campaigns perform. This section explains exactly what that involves.
What we send to Google Analytics 4. The following conversion events are reported to our GA4 property:
sign_up — when an account is created, together with the sign-up method used (email, Apple, or Google).onboarding_complete — when you finish onboarding, together with the number of perfumes you rated and added to your collection during it.Each event also carries a technical label identifying whether it came from our development, staging, or production environment.
Separately from the events we send deliberately, Firebase Analytics collects a standard set of events and properties automatically on Google's side — for example first app open, session starts, screen views, app updates, and basic device, operating system, language and approximate location information derived from your IP address. We do not choose the contents of these automatic events; they are determined by Google and described in Google's Firebase documentation.
We do not send your email address, username, date of birth, perfume collection, ratings, searches, or photos to Google.
How events are linked to a campaign. To connect a conversion back to the advertising campaign that produced it, we share two identifiers with Google via RevenueCat: your Firebase app instance ID (an identifier Firebase assigns to your installation of the app, which is regenerated if you reinstall) and, on Android, your advertising identifier (see below). Our GA4 property is linked to our Google Ads account, and Google Ads uses these conversions to report on and optimise the delivery of our own campaigns.
What we do not do. We do not display advertising inside Scented.ai. We do not use this data to build advertising audiences or remarketing lists, we do not use it to show you personalised advertising, and we do not advertise to you or profile you on behalf of any third party. Google LLC processes the data it receives in accordance with its own policies and its agreements with us.
Apple's SKAdNetwork. On iOS, Apple may provide us and our advertising partners with privacy-preserving install attribution through SKAdNetwork. This is operated by Apple, reports results in aggregate, and does not identify you individually.
iOS tracking. We do not currently collect the iOS advertising identifier (IDFA). If we introduce it in a future version, we will request your permission through Apple's App Tracking Transparency prompt first, and update this policy before doing so.
On Android, we collect your Google Advertising ID (GAID). Our app declares the com.google.android.gms.permission.AD_ID permission for this purpose.
We use it for one purpose only: to attribute app installs, sign-ups and subscriptions to the advertising campaign that produced them, as described under Analytics and Advertising Measurement above. We do not use it to build audiences or to target advertising at you.
How to opt out. The advertising identifier is designed to be user-controllable, and you can change or remove it at any time without affecting your use of the app:
You may also object to this processing, or ask us to delete advertising measurement data associated with your account, by contacting us at support@scented.ai.
You can use parts of Scented.ai without creating an account, by choosing "continue as guest". Guest mode is not anonymous browsing, and this section explains what it does collect.
Device identifier. When you start a guest session, the app generates or reads a persistent identifier for your device — on iOS the Identifier for Vendor, on Android the Android ID, or, where neither is available, a random value generated by the app. This identifier is stored on your device and sent to our server, which uses it to create a guest session and to restore that same session the next time you open the app.
What is recorded against your device. While you use the app as a guest, your activity — including searches, perfumes viewed, ratings, items added to a collection, onboarding answers, and the usage analytics described elsewhere in this policy — is stored on our servers and associated with that device identifier rather than with a named account. Because this identifier is persistent, this activity forms a profile of your device across sessions. Under GDPR and Serbian PDPL, such an identifier is personal data even though we do not know your name.
If you later create an account. Creating an account does not carry your guest activity over. Registration starts a fresh account, and the activity recorded during your guest session is not linked or transferred to it — your guest collection, ratings and history will not appear in your new account. The guest data already recorded against your device stays stored separately, associated with the device rather than with you, and is removed only if you ask us to delete it.
Retention and deletion. We do not currently apply an automatic expiry to guest session data: it is retained indefinitely until it is deleted at your request. Because guest data is not linked to any account you may later create, deleting that account does not delete it, and a guest session has no email address against which we could verify a deletion request made through the in-app account deletion flow. To have guest data deleted, contact us at support@scented.ai and we will delete the data associated with your device. Reinstalling the app or resetting your device identifier disconnects you from the previous guest session, but does not by itself delete the data already recorded against it.
No guarantee of retention. Guest data is not backed up to your account until you register, and we do not guarantee that it can be recovered if you change device, reinstall, or reset your device identifier.
Scented.ai lets you share a perfume list by generating a link of the form https://scented.ai/shared-list/<id>. Please read this section before sharing, because sharing publishes information to the open internet.
The link is public. Anyone who has the link can open it. No account, login, or invitation is required, and the page can be indexed by search engines, forwarded, posted publicly, or archived by third parties beyond our control.
What becomes public. The shared page displays: the name you gave the list, the date it was created, and the perfumes it contains together with their brand, year, image and description. For a list created from a Magic Search, the name of the list is the text of your search prompt, which is shown on the page — so anything you typed into that search becomes publicly visible if you share it. Your email address, username, date of birth and account details are not shown.
Recipients can keep a copy. Anyone who opens a shared link can save that list into their own Scented.ai account. Copies saved by other users are their data, and revoking your link does not remove copies already saved by someone else, nor content already copied, screenshotted, cached or indexed elsewhere.
How to stop sharing. A share link stays live until sharing is disabled for that list. If you want a link deactivated, contact us at support@scented.ai and we will disable it. Deleting your account also disables your share links.
Please do not include personal data. Because list names and Magic Search prompts are published, do not put your own or anyone else's personal information into them.
With your explicit permission, we may send you push notifications about personalised perfume recommendations. We request your permission before sending any notifications.
You may withdraw this permission at any time through your device's notification settings:
Withdrawing notification permission does not affect your access to the rest of the Service. We do not send advertising or marketing notifications on behalf of third parties.
Scented.ai's native iOS and Android applications do not use browser cookies. Within the native apps and on our server infrastructure, PostHog analytics does not set cookies in your browser.
Our website (scented.ai) runs cookieless analytics: PostHog and Vercel Web Analytics do not set cookies or other identifiers on your device, and we do not record your browsing sessions. We set one functional first-party cookie, landing_variant (values a or b, expiring after 14 days), so that you see a consistent version of our landing page and we can compare how the two versions perform. It holds no personal data and is not used for advertising, cross-site tracking, or profiling. Because we do not store analytics information on your device, the website does not show a cookie consent banner. For more detail, see our Cookie Policy.
You can adjust your browser settings at any time to limit or refuse cookies. Doing so will not affect your use of the mobile application.
Our Service is available exclusively through the Apple App Store and Google Play, both rated for users aged 16 and over. By downloading and using our app, you confirm that you are at least 16 years old.
In the current version of the app, we ask for your date of birth during registration and verify it against this minimum age requirement before your account is created; if verification fails, the account is not created. We use your date of birth solely for this purpose. If you are using an earlier version of the app that has not been updated to include this step, we do not collect your date of birth and instead rely on your confirmation at signup that you meet the minimum age requirement.
We do not knowingly collect personal data from users under 16. If we become aware that a user under 16 has registered, we will promptly delete their account and associated personal data. To report a potential underage account, please contact us at support@scented.ai.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority — for Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) — within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and Serbian PDPL.
Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, unless the affected data was rendered unintelligible through encryption.
If you suspect a data security incident involving your account, please contact us immediately at support@scented.ai.
From time to time, we may update this Privacy Policy to reflect changes in practices or for other operational, legal, or regulatory reasons. Users will be notified of any significant changes through a mandatory in-app notice on first launch following the update, or via email.
By using scented.ai, users acknowledge and agree to this Privacy Policy. We encourage users to review this section periodically to stay informed about how we are helping to protect the personal information we collect.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@scented.ai.