1. Data Controller

Sillage is developed and operated by Yoann Auger, an individual developer.
Contact: contact@yoannauger.com

2. Data We Collect

Account data

When you create an account, we collect your email address to authenticate you and associate your data across devices. Authentication is powered by Supabase.

Perfume collection data

Information you voluntarily enter about your fragrances: bottle names, brands, houses, notes, personal ratings, and written notes. This data is stored in your account and synced to our servers.

Photos

When you use the bottle identification feature, your photos are sent to Anthropic's API for processing. Anthropic's servers analyze the image to identify the fragrance. Photos may also be stored in your Sillage collection via Supabase Storage if you choose to save them.

Usage data

We track usage counts for specific features (number of scans used, Stylist suggestions used, Scent of the Day records, streak data) to manage your plan limits and display your history. This data is stored in your account.

Purchase and subscription data

Purchases are processed entirely by Apple through the App Store. We never receive your payment card details. RevenueCat, our subscription management service, communicates with Apple to verify your entitlements and provides us with your subscription status (active/inactive, plan type, renewal date).

Push notification preferences

If you grant permission, your device registers a push notification token with Expo's notification infrastructure. This token is used only to deliver notifications you have explicitly enabled. Your notification preferences are stored locally on your device.

3. How We Use Your Data

• Account data (email): authentication and account recovery
• Collection data: displaying your collection, enabling cross-device sync
• Photos: bottle identification (processed by Anthropic, not retained after analysis)
• Usage data: enforcing free-tier limits, displaying scan and stylist credits
• Subscription status: unlocking premium features
• Notification token: delivering scheduled notifications you have opted into

We do not use your data for advertising, do not sell your data to third parties, and do not build profiles for marketing purposes.

4. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Database, authentication, and file storage	supabase.com/privacy
Anthropic	Bottle identification (image analysis via API)	anthropic.com/privacy
RevenueCat	Subscription and in-app purchase management	revenuecat.com/privacy
Apple	Payment processing, push notifications (APNs)	apple.com/legal/privacy

Each of these services is bound by its own privacy policy. Data transferred to services located outside the EU (Anthropic, RevenueCat) is done on the basis of your consent when using those features, or under standard contractual clauses where applicable.

5. Data Storage and Security

Your data is stored on Supabase infrastructure hosted on Amazon Web Services (AWS) in the United States. We apply row-level security on our database, ensuring each user can only access their own data. Connections between the app and our services are encrypted using TLS.

Photos submitted for identification are transmitted securely and are not stored by us after the identification request is complete.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your data (email, collection, photos, usage history) is permanently deleted from our systems within 30 days. Residual backups may take up to 90 days to be fully purged.

Notification tokens are removed when you disable notifications or uninstall the app.

7. Your Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your account and all associated data
• Right to data portability: receive your data in a machine-readable format
• Right to restriction: ask us to restrict processing in certain circumstances
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at contact@yoannauger.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France).

8. Children's Privacy

Sillage is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the new policy. For significant changes, we may notify you via in-app message or email.

10. Contact

For any privacy-related questions or requests:
Yoann Auger
contact@yoannauger.com