Privacy policy.

Fraghab is operated by FRAGHAB LLC, a Michigan limited liability company. For users in the European Economic Area, the United Kingdom, and Switzerland, FRAGHAB LLC is the data controller for the personal data described here.

This policy covers the Fraghab website at fraghab.com, the Fraghab iOS and Android apps, the House API, and the emails we send. The Fraghab browser extension is covered by its own extension privacy policy, because it handles data locally in your browser.

This policy is part of our Terms of Service. Reach us about anything on this page at [email protected].

Fraghab collects only the data necessary to provide the service. This includes:

• Account information: email address, username, and password (stored as a secure hash, never in plain text). If you sign in with Google, we receive your email address, name, and Google account identifier from Google instead of a password
• Contact messages: your name, email address, selected topic, and the message you choose to send through our contact form
• Profile data: optional avatar image and display preferences
• Collection data: fragrance names, brands, notes, accords, ratings, bottle sizes, and other metadata you enter
• Wearing logs: dates, fragrances worn, occasion, weather conditions, and personal ratings
• Location, only if you choose to set it: on the web you may allow the browser's location prompt, and the coordinates it reports are saved to your account; in the mobile apps you type a city and that city's approximate, city-level coordinates are saved — the apps never read your device's location. Your saved location weights suggestions by your local weather and places your pin on the community world map
• Connected calendars (optional): if you connect Google Calendar, a personal ICS feed URL, or an uploaded .ics file, the event titles and start and end times within the date range the app needs, plus the access credentials or file contents required to read them (stored securely server-side, never shown to you or written to logs)
• Wishlist items: target fragrances, priority levels, and budget notes
• Layering combos: fragrance pairings, spray zone maps, and combo ratings
• Community content: Group Therapy posts, polls, poll votes, reviews, reactions, and comments
• Marketplace data: your listings with their images and prices, storefront settings, cart and order records, watchlist and wanted-board entries, seller and buyer reviews, and reports you file or that are filed about you
• Direct messages: private messages and shared images between users
• Follow relationships: which users you follow and who follows you
• Product analytics: a fixed set of five app events (app opened, signed in, collection viewed, suggestion requested, wearing logged) recorded against your account, with counts and short labels only, never free text
• Email link clicks: when we email you about your account or these policies and you follow a link in it, we record that you followed it, when you first did, and which of the linked pages it was. We do not track whether you opened the email, and we place no tracking image in any message we send
• Crash diagnostics: if the mobile app crashes, the error, your device model, OS version, and the app release, identified by your numeric account id only
• Session and device details: the browser or app identifier of each signed-in session, the app version and platform, and your device's time zone name so "today" is correct for you
• Limited security data: the network address a failed sign-in attempt came from, kept briefly to rate-limit password guessing

What we do not collect. We do not collect your location unless you choose to set it as described above. We do not collect your contacts, photos beyond what you upload, biometric data, payment card or bank details, government identifiers, or any advertising identifier. We do not ask for special category or sensitive personal data, and you should not put it into a post, a listing, or a note.

Your data is used to operate and improve the Fraghab experience:

• Display your collection, wearings, wishlist, and combos within the app
• Generate personalized insights: most worn fragrances, seasonal trends, weather-based suggestions
• Read your connected calendar (read-only) to show today's events while you log a wearing, and to pre-fill your Weekly Planner with a suggested occasion for each day
• Power community features, showing your posts, polls, and reviews to other users
• Run the marketplace: publishing your listings and storefront, keeping cart and order records, and showing seller reviews
• Deliver direct messages between you and other users
• Send transactional emails: account verification, password resets, and invite notifications
• Respond to contact messages you send us
• Understand which features are used, and diagnose crashes, so the apps get better. See "The iOS & Android apps" below for exactly what is recorded
• Produce aggregate, de-identified statistics about how members engage with a fragrance brand, and provide those statistics to that brand when we have verified it owns the brand, so it can keep its catalog accurate. What a house does and does not receive is set out in full in "Statistics we share with verified houses"
• Keep the service safe: preventing abuse, detecting fraud and scams, enforcing our terms, and counting a failed sign-in attempt against the network address it came from for up to fifteen minutes, purely to rate-limit guessing
• Comply with law, and respond to a valid legal request

Fraghab does not use your personal data for advertising, does not sell it, and does not use it to train or develop its own AI or machine learning models. We do not use it for profiling that produces legal or similarly significant effects on you.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on these legal bases under Article 6 of the GDPR:

• Performance of a contract, Article 6(1)(b): creating and running your account, storing and displaying your collection, delivering messages, publishing your listings, and sending transactional email. Without this we cannot provide the service
• Consent, Article 6(1)(a): connecting a calendar, uploading an avatar or an .ics file, and receiving optional product announcement emails or a research survey. You can withdraw consent at any time, which does not affect processing already carried out
• Legitimate interests, Article 6(1)(f): keeping the service secure, preventing fraud and abuse, rate-limiting sign-in attempts, diagnosing crashes, understanding which features are used so we can improve them, producing the aggregate, de-identified brand statistics described in "Statistics we share with verified houses" so that the catalog members rely on is accurate, and enforcing our terms. We balance these against your rights, and you may object as described in "Your rights"
• Legal obligation, Article 6(1)(c): responding to a lawful request, and keeping records we are required to keep

Where we rely on consent and you withdraw it, we stop that processing and delete the data it depended on, for example the stored calendar credentials when you disconnect a calendar.

Your data is stored in a managed database hosted by Turso, on servers located in the United States. All connections between the app and the database are encrypted. Passwords are hashed using industry-standard algorithms and are never stored or transmitted in plain text.

Access to production data is limited to the people who need it to run the service, and every query that touches your records is scoped to your authenticated account. Calendar credentials are held server-side only, are never sent to your browser, and are never written to logs.

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Fraghab does not sell, rent, or trade your personal data to third parties. Period. We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding twelve months.

Your data may be shared only in these limited circumstances:

• Infrastructure providers: the services necessary to host and operate Fraghab, listed in "Third-party services" below. They act as our processors, handle data only on our instructions, and are bound by contract
• Anthropic: when you request an AI-powered suggestion, the information needed to produce that suggestion, such as your request and relevant collection or planning context, is sent to Anthropic's API for processing. We use Anthropic's commercial API, which does not use inputs or outputs for model training by default
• Crash reporting: if the mobile app crashes, the diagnostic report goes to Sentry, our error-monitoring provider, carrying your numeric account id but never your username, email, or any content you wrote
• Other users: the parts of your account you choose to publish or send, described in "What is public on Fraghab" and "Community content" below
• Verified fragrance houses: aggregate, de-identified statistics about that house's own brand. These carry no identifier and no individual record, they cannot be narrowed down to one member, and the house is contractually barred from trying. "Statistics we share with verified houses" below sets out exactly what a house does and does not receive
• Legal requirements: if required by law, regulation, subpoena, or other valid legal process, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of a user, of the public, or of Fraghab. Where we may lawfully tell you, we will
• A business transfer: if Fraghab is involved in a merger, acquisition, financing, reorganization, or sale of assets, your data may transfer as part of that transaction. The recipient stays bound by this policy, or gives you notice before any material change

Product analytics are notshared with anyone. They are recorded by Fraghab, stored in Fraghab’s own database, and, because they are recorded against your account so we can tell one person’s usage from another’s, they are personal data, not anonymous statistics. They are deleted with your account.

Fraghab runs a partner program for fragrance houses. A house we have verified as the owner of its brand can see statistics about how Fraghab members engage with that brand only, so it can correct what is published about its fragrances and understand which of them people want.

What a verified house can see about its own brand:

• How many members own its fragrances, and how many bottles in total
• How many times its fragrances have been logged as worn, and by how many members
• How many members have its fragrances on a wishlist, and which of them are most wanted
• How its fragrances break down across the seasons and occasions members record
• Reviews of its fragrances that members chose to publish in the public library, which are already public on this site

What a verified house never receives:

• Your username, email address, account id, or any other identifier
• Your location, country, or any demographic detail
• Anything you paid, or any cost or valuation you recorded
• Your wearing logs themselves, your private notes, your messages, or any other free text you wrote
• Any ability to ask about a named member, or to receive a list of members

How we keep this from identifying you. Houses receive counts and category breakdowns, never records. Every figure counts a group of members, and a figure is withheld entirely when fewer than five members make it up, so no number can be narrowed down to one person. Nothing we send carries an identifier, and we do not provide a geographic or demographic breakdown of any kind, because at our current size that could isolate an individual.

Our commitment. We publicly commit to maintain and use these statistics only in de-identified, aggregated form. We do not attempt to re-identify any member from them, and every verified house is contractually prohibited from attempting to re-identify anyone, or from combining what it receives with other data in order to do so. Because the statistics are de-identified and aggregated they are not personal information, so providing them is neither a sale nor a share of your personal data. Houses pay us nothing for them.

If you would rather not be counted. Email [email protected] and we will exclude your collection, wearings, and wishlist from these statistics. Nothing else about your account changes, and we will not treat you differently for asking.

Some surfaces are public by design. Anyone with the link can see them without a Fraghab account, and a search engine or another service may index, crawl, or cache them. Treat anything you put on these surfaces as published.

• Shared wishlist and gift registry links, at the token URL you generate and share
• Scent passport pages, at your username
• Marketplace listing pages and seller storefront pages, including the listing text, photos, price, your username, and your seller reviews
• Written reviews you publish in the public library
• Group Therapy posts, polls, and comments, which are visible to other signed-in Fraghab users

You choose whether to create a share link, publish a listing, or post a review. Deleting the content removes it from Fraghab, but we cannot recall a copy a third party already made, or a page a search engine already cached.

Your email address, password, collection cost data, wearing logs, calendar events, direct messages, and analytics are never published.

Nothing in this section is affected by the brand statistics described above. Where your collection, wearings, or wishlist contribute to one of those figures, they do so only inside an aggregate count that carries no identifier and cannot be traced back to you, and never as a record of yours.

Fraghab uses a single session cookie for authentication. This cookie identifies your logged-in session and is essential for the app to function. It contains no tracking data and is not shared with third parties. A small number of additional first-party cookies or local storage entries hold your own preferences, such as your theme and view mode.

We do not use third-party tracking cookies, analytics pixels, or advertising trackers, so there is no consent banner to click and nothing to opt out of. Your browsing behavior within Fraghab is not monitored or sold. Because we do not track you across sites and do not sell or share personal information, there is no cross-site tracking for a Do Not Track or Global Privacy Control signal to switch off, but we will honor such a signal wherever the law requires it.

The mobile apps use no cookies at all. They hold a sign-in token in your device’s own encrypted storage (the iOS Keychain or the Android Keystore), which is cleared when you sign out or delete your account.

You have full control over your data on Fraghab:

• Access: view all your data directly within the app at any time, or ask us for a copy
• Correction: update your profile, collection, and any other personal data through the app
• Export and portability: request a complete export of your data by contacting us
• Deletion: delete your account yourself at any time in Settings, then Danger zone, then Delete account, or on the web at fraghab.com/account/delete. Deletion is completed as described in "Data retention"
• Restriction and objection: ask us to restrict processing, or object to processing we carry out on the basis of a legitimate interest
• Withdraw consent: disconnect a calendar, or opt out of an optional email, at any time
• No automated decisions: we do not make decisions about you by solely automated means that produce a legal or similarly significant effect

How to make a request. Email [email protected] from the address on your account, or tell us which account you are asking about. We may need to verify your identity before we act, and we will only ask for what is necessary to do that. We respond within 30 days, or 45 days where a US state law sets that period, and we will tell you if we need an extension the law allows. Using a right costs nothing, and we will never treat you worse for using one.

Authorized agents.You may use an authorized agent to make a request for you. We will ask for proof of the agent’s authority, and may still verify your identity directly.

If you disagree with our answer.Reply to our response and ask for an appeal. Someone who was not involved in the original decision will review it and answer you in writing within 45 days. If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority, or with the UK Information Commissioner’s Office. If you are in the US, you may contact your state attorney general.

If you live in California, Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you have the rights described in "Your rights" above, and the following applies to the extent that law covers us.

Categories we collect.Identifiers such as your email address, username, and account id; internet or app activity such as the five product-analytics events, session records, and crash diagnostics; commercial information such as your listings, orders, and wishlist budget notes; visual content, meaning the images you upload; the content of your posts, messages, and reviews; and inferences drawn to produce a fragrance suggestion. Sources, purposes, and recipients are described in "What we collect", "How we use your data", and "Data sharing".

Sale, sharing and targeted advertising. We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for targeted advertising, and we do not profile you in furtherance of a decision that produces a legal or similarly significant effect. We have not done any of those things in the preceding twelve months. There is therefore no opt-out for you to exercise, and no "Do Not Sell or Share My Personal Information" mechanism is required.

De-identified information. The aggregate statistics we provide to verified fragrance houses are de-identified. We take reasonable measures to ensure they cannot be associated with any consumer, including withholding any figure made up of fewer than five members. We publicly commit to maintain and use them only in de-identified, aggregated form, we do not attempt to re-identify anyone from them, and we contractually require every recipient to do the same. De-identified information is not personal information under these laws, so providing it is neither a sale nor a share. Even so, you may ask us to leave your data out of these statistics entirely, as described in "Statistics we share with verified houses".

Sensitive personal information. We do not collect or process sensitive personal information as those laws define it, so there is nothing for you to limit. We do not knowingly sell or share the personal information of anyone under 16.

Retention and non-discrimination.We keep personal information as described in "Data retention". We will not deny you service, charge you a different price, or give you a lower quality of service because you used a privacy right.

Fraghab is operated from the United States, and our infrastructure providers store and process data in the United States. If you use Fraghab from outside the US, your personal data will be transferred to, stored in, and processed in the US, where privacy law differs from the law where you live.

For transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where it applies, in our contracts with the providers listed in "Third-party services", or on another lawful transfer mechanism where one applies. You can request a summary of the safeguards in place by emailing [email protected].

By using Fraghab you understand that your data will be handled as described in this policy. Nothing here takes away a mandatory right you have under the law where you live.

Fraghab is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Our Terms of Service require you to be 18 to hold an account on your own, or 13 with the consent and supervision of a parent or legal guardian, and 18 to buy or sell in the marketplace.

If we learn that we hold personal information from a child under 13, we will delete it and terminate the account. If you are a parent or guardian and believe your child has given us personal information, email [email protected] and we will act promptly.

Content you post in Group Therapy, including text posts, polls, reviews, reactions, and comments, is visible to other Fraghab users. Marketplace listings, storefronts, and library reviews are visible to anyone, as described in "What is public on Fraghab". Direct messages are visible only to you and the recipient.

Exercise discretion when sharing in community spaces. Do not include sensitive personal information, such as financial details or a physical address, in a public post, a listing, or a review. Fraghab is not responsible for information you choose to share publicly.

A message you sent stays in the recipient’s thread, and a quote of your post stays in the quoting post, even after you delete your copy or your account. That is how a conversation works, and we cannot remove someone else’s legitimate copy of what you sent them.

Fraghab relies on a limited set of third-party services to operate:

• Turso: database hosting and data storage
• Vercel: application hosting and deployment
• Cloudflare: DNS, content delivery, and security filtering in front of the app. Handles request metadata such as network address and user agent in order to route traffic and block abuse
• Proton Mail: transactional email delivery (verification, password reset, invitations)
• Anthropic: AI processing for suggestions, planning, and natural-language search, through the commercial API (see "Data sharing")
• Sentry: crash and error diagnostics for the iOS and Android apps only. Receives the error, your device model, OS version, app release, and your numeric account id (see "The iOS & Android apps" below)
• Google Sign-In: only if you choose to sign in with Google. We receive your email address, name, and Google account identifier in order to create or match your account
• Google Calendar API: only if you choose to connect Google Calendar, used for read-only access to your events (see "Connected calendars & Google user data" below)

These providers process data only as necessary to deliver their respective services, act on our instructions where they are our processors, and are bound by their own privacy policies and by our contracts with them.

Fraghab lets you optionally connect a personal calendar so the app can match fragrance suggestions to what’s actually on your schedule. Connecting a calendar is never required to use Fraghab, and you can disconnect it at any time.

What we access. With your permission, Fraghab requests read-only access to your Google Calendar (events-only scope calendar.events.readonly), or reads a personal ICS feed URL or uploaded .ics file you provide. We read only the event titles and start and end times within the date range the app needs (today, or the week you are planning). We do not access attendees, locations, descriptions, attachments, conferencing links, or any other calendar field, and we never create, modify, or delete calendar entries.

How we use it.Calendar events are used solely to (a) display today’s events alongside your wearing log and dashboard, and (b) pre-fill the Weekly Planner with a suggested occasion per day, which is passed as context to the fragrance suggestion engine to generate a recommendation for you in that moment. This is inference only, used to deliver the user-facing feature. Google user data is never used to train, develop, or improve any artificial intelligence or machine learning models, and is never used for advertising, profiling, building user profiles for unrelated purposes, or sold or transferred to anyone for those purposes.

How we store it.For Google Calendar, the OAuth access and refresh tokens are stored server-side only. They are never sent to your browser and never written to logs. For a manual ICS feed URL, only the URL is stored and event contents are fetched on demand. For an uploaded .ics file, the file’s contents are stored so the app can read events from it. The upload is a static snapshot, removed when you disconnect or delete your account.

How to revoke and delete.Disconnect at any time in Profile, then Edit, then Your Calendar, which immediately deletes the stored tokens or feed URL. You can also revoke Fraghab’s access directly from your Google Account at myaccount.google.com/permissions. All calendar connection data is also removed if you delete your Fraghab account.

Limited Use.Fraghab’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Fraghab mobile apps sign in to the same account and store the same collection as the website, so everything above applies to them. This section covers what is specific to a phone.

What the apps send.Beyond what you type in, meaning your collection, wearings, wishlist, and community posts, the apps transmit exactly three things you did not type: the five product-analytics events listed below, a crash report if the app crashes, and ordinary session details (app version, platform, and your device’s time zone name).

• Analytics events: app opened, signed in, collection viewed, suggestion requested, wearing logged. That is the whole list; the app cannot send any other event
• What travels with an event: counts, yes or no flags, and short fixed labels only. Free text is stripped on our servers before the event is stored, so a fragrance name or a note you wrote can never end up in analytics
• Crash reports: the error and where it happened, your device model, OS version, and the app release. Sent to Sentry (see "Third-party services"), tagged with your numeric account id and nothing else
• Deliberately excluded from crash reports: screenshots, a copy of the screen's contents, anything you typed into the console, and the query part of any web address. Screen names are recorded; screen contents are not
• Session details: the app version and platform, an identifier for each signed-in session, and your device's time zone name

Your time zone is not your location.The apps send a time zone name, for example "America/New_York", which is a regional setting on your device. It is used only to work out which day "today" is when you log a wearing. Setting a location is a separate, deliberate step: the apps never read your device’s location — if you want weather-aware suggestions, you type a city and the app saves that city’s approximate coordinates, as described in "What we collect". Skip it and everything except weather-based suggestions still works.

What the apps never ask for or collect. Your device’s location, the camera, your photo library beyond the individual pictures you pick, contacts, calendar, microphone, health, or financial data. Bottle and decant pictures come only through the system photo picker, which hands the app just the photos you select — the app cannot browse your library. There is no advertising, no advertising identifier, and no tracking of you across other companies’ apps or websites, so iOS never shows you a tracking permission prompt, because there is nothing to ask about. Fraghab does not sell your data or share it with data brokers.

Permissions. The Android app requests network access and, if you turn on the app lock, biometric unlock. The iOS app asks for Face ID only for that same lock, and only when you enable it. Choosing a bottle photo opens the system photo picker, which needs no permission of its own and shares only what you pick. Nothing else is requested — in particular, neither app ever requests the location permission.

Deleting your account from the app. Open Settings, then Danger zone, then Delete account, confirm with your password, and the account and everything in it, including the analytics events and crash-report association described here, is removed. You can also do it on the web at fraghab.com/account/delete, without signing in first.

When you ask for a fragrance suggestion, a weekly plan, buying guidance, or a natural-language search, the information needed to answer, such as your request and the relevant part of your collection or plan, is sent to Anthropic’s commercial API for processing and the result is returned to you. That API does not use inputs or outputs for model training by default. Fraghab does not use your data to train or develop its own models.

A suggestion is an inference produced to deliver a feature you asked for. It is not a decision about you, it has no legal or similarly significant effect, and it is not profiling for advertising. Nothing in Fraghab makes a decision about you by solely automated means within the meaning of Article 22 of the GDPR.

Do not type anything into an AI feature that you would not want processed by a third-party provider. AI output can be wrong, and the Terms of Service explain what you should and should not rely on it for.

Transactional email. We send the email the service needs to work: address verification, password resets, invite notifications, and notices about your account or these policies. You cannot opt out of these while your account is open, because they are part of providing the service.

Optional email.We occasionally send a product announcement, or invite you to a short research survey. You can opt out at any time by replying "unsubscribe" to the message, or by emailing [email protected]. Opting out of optional email does not affect transactional email.

What we measure, and what we do not. We do not track whether you open an email. There is no tracking image, invisible pixel, or read receipt in any message we send. What we do record is whether you followed a link: the links in an account or policy email route through fraghab.com first, so we can note that the link was used, when it was first used, and which page it led to, before sending you on to that page. The link carries a random one-time reference rather than your email address, so your address is never placed in a web address that could be logged by a network in between.

We use it only to judge whether a message reached people, and it is deleted with your account. If you would rather not be counted, open the plain link printed at the bottom of the email instead of the button, and nothing is recorded at all.

We never sell or rent your email address, never send third-party advertising, and never pass your address to a marketing list.

Your data is retained for as long as your account is active. When you delete your account, your personal data, including your collection, wearings, community posts, messages, listings, analytics events, and stored sessions, is removed from our live systems promptly, and in any case within 30 days.

What can outlast that.Copies may persist in routine encrypted backups until those backups age out. We may keep the limited data we are required or permitted to keep in order to comply with law, resolve a dispute, enforce our terms, or prevent fraud and abuse, and we keep it only as long as that purpose lasts. A direct message you sent stays in the recipient’s thread, and content a third party already copied or cached from a public surface may remain where we cannot reach it.

Two shorter clocks run regardless of your account: failed sign-in counters keyed to a network address are erased within fifteen minutes, and crash reports held by Sentry expire on that provider’s own retention schedule.

Aggregated or de-identified data that cannot reasonably be linked back to an individual may be retained indefinitely for service improvement. We do not attempt to re-identify it.

If a security incident affects your personal data, we will investigate, take steps to contain it, and notify you and the relevant authorities where the law requires, without undue delay. We will tell you what happened, what data was involved as far as we know it, and what you can do.

If you find a vulnerability in Fraghab, please report it to [email protected] rather than testing it against other users’ accounts. We will not pursue a good-faith researcher who reports privately and gives us a reasonable chance to fix the issue.

We may update this Privacy Policy from time to time. When we make material changes, we will notify users through the platform or by email and update the effective date at the top of this page. Continued use of Fraghab after changes take effect constitutes acceptance of the revised policy.

The "Effective" date at the top of this page indicates when this policy was last updated.

Fraghab is operated by FRAGHAB LLC, a Michigan limited liability company, which is the data controller for the purposes of this policy.

Questions about this Privacy Policy, a data request, or an appeal go to [email protected]. For anything else legal, including a copyright notice, see the contact section of our Terms of Service.

Our mailing address is FRAGHAB LLC, 4121 Deeside Dr, Brighton, MI 48116, United States.