Privacy Policy

1. Introduction

Epinote ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Epinote mobile application and website (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, and profile preferences when you create an account.
• Fragrance Data: Your fragrance collection, wishlists, ratings, reviews, and layering preferences.
• Scent Preferences: Favorite notes, avoided notes, mood preferences, occasion settings, and seasonal preferences you configure.
• Waitlist Information: Email address submitted through our waitlist forms.
• Communications: Messages you send to us via email or support channels.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: Features used, pages visited, search queries, time spent on the app, and interaction patterns.
• Location Data: General location (city-level) for weather-based fragrance recommendations, only when you grant permission.
• Log Data: IP address, browser type, access times, and referring URLs.

2.3 Information from Third Parties

• Authentication Providers: If you sign in via Google or Apple, we receive your name and email as permitted by your account settings.
• Fragrance Databases: We aggregate publicly available fragrance data to populate our catalog.

3. How We Use Your Information

• To provide, maintain, and improve the Service.
• To generate personalized fragrance recommendations and layering suggestions using AI models.
• To build and refine your Scent DNA profile.
• To provide weather-adaptive and context-aware fragrance suggestions.
• To facilitate community features such as Scent Circles and shared accords.
• To send service-related communications (account verification, updates, security alerts).
• To send marketing communications (only with your consent; you may opt out at any time).
• To detect, prevent, and address technical issues and security threats.
• To analyze usage trends and improve user experience.

4. AI and Data Processing

Epinote uses artificial intelligence to analyze your fragrance preferences and generate recommendations. Specifically:

• Your scent preferences are processed by our AI models to calculate note harmony, molecular compatibility, and projection curves.
• AI-generated recommendations are based on your collection, ratings, and contextual signals (mood, season, weather, occasion).
• We do not sell your scent preference data or use it to train third-party AI models.
• AI processing occurs on secure cloud infrastructure with encrypted data transmission.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party companies that help us operate the Service (hosting, analytics, email delivery), bound by confidentiality agreements.
• Affiliate Partners: When you click affiliate links (e.g., FragranceNet), the affiliate network may collect click and purchase data. We do not share your Epinote profile data with affiliate partners.
• Community Features: Information you choose to share publicly through Scent Circles or community profiles is visible to other users.
• Legal Requirements: When required by law, legal process, or to protect the rights, property, or safety of Epinote, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at contact@epinote.app.

Anonymized and aggregated data (which cannot identify you) may be retained indefinitely for analytics and service improvement.

7. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and vulnerability assessments.
• Access controls and authentication for all internal systems.
• Secure, encrypted backups with geographic redundancy.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at contact@epinote.app. We will respond within 30 days.

9. Cookies and Tracking

Our website uses minimal cookies and local storage for:

• Theme preference (light/dark mode).
• Basic analytics to understand how visitors interact with our site.

We do not use third-party advertising trackers on our website.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

contact@epinote.app