Privacy Policy

Information We Collect

Account Information

When you create an account, we collect:

• Email address (via Apple Sign-In, Google Sign-In, or email magic link)
• First name (optional, if you choose to provide it during profile setup)
• Authentication provider used (Apple, Google, or email)
• Marketing communication preference (opt-in or opt-out)

Usage Data

We automatically collect:

• Number of free content views used
• Subscription status
• Onboarding completion status
• Favorites and collections you create within the App
• App usage analytics (screens viewed, features used, subscription events)

AI Chat Data

When you use the Thymely aromatherapist chat feature, the following is sent to our chat provider:

• Your chat messages and prompts
• Your account identifier
• Your email address
• Your membership tier (free, subscriber, or premium)

This data is processed by Thymely (api.askthymely.com), a third-party service, to generate responses. Chat conversations are not permanently stored on our servers and are cleared when you close the App.

Crash and Error Reports

We use Sentry for error monitoring. When the App encounters an error, the following may be collected:

• Your account identifier (not your email)
• Device type and operating system version
• App version
• Error details and stack traces

We do not send your email address to Sentry.

How We Use Your Information

We use your information to:

• Authenticate your account and maintain your session
• Store your favorites, collections, and preferences
• Provide AI chat functionality through Thymely
• Process and manage your subscription
• Monitor and fix app errors and crashes
• Improve the App experience
• Send you important operational communications, including safety alerts, critical app updates, and customer service responses
• Send you marketing communications such as aromatherapy tips and recommendations, if you have opted in

Communications

Operational Communications

We may use your email address to contact you regarding:

• Safety information related to essential oils or aromatherapy products
• Critical changes or updates to the App or our services
• Responses to your customer service inquiries
• Important notices about your account or subscription

These communications are necessary for the operation of the service and cannot be opted out of while your account is active.

Marketing Communications

With your consent, we may send you:

• Aromatherapy tips and recommendations
• New recipe and content announcements
• Special offers and promotions

You can opt in to marketing communications during profile setup or at any time in the Preferences section of the App. You can opt out at any time by toggling the "Marketing Emails" setting in the App, or by clicking the unsubscribe link in any marketing email. We will never send marketing emails unless you have explicitly opted in.

Third-Party Services

We share data with the following third-party services, each for a specific purpose:

Advertising and Attribution Partners

We use third-party advertising and attribution services to measure how users discover our app and to evaluate the performance of our marketing campaigns. These services help us understand which ads led to app installs, free previews, and subscription purchases, so we can spend our marketing budget effectively. Specifically:

• Meta (Facebook) Ads Attribution. When you allow tracking via the iOS App Tracking Transparency prompt (or, on Android, by default unless you opt out in your device settings), our app uses the Meta SDK to share a Meta-issued anonymous identifier (and, where permitted, your device advertising identifier) with Meta Platforms, Inc. Subscription and trial events are also forwarded to Meta via our payments provider, RevenueCat, using Meta's Conversions API. This data is used solely to attribute conversions to Meta ad campaigns. See Meta's Data Policy at https://www.facebook.com/policy.php.
• Apple Search Ads. On iOS, we collect Apple's AdServices attribution token to measure conversions from Apple Search Ads campaigns. This is a privacy-preserving identifier that does not require the App Tracking Transparency prompt. See Apple's privacy notice at https://searchads.apple.com/privacy.

You can disable Meta ad tracking on iOS at any time in Settings → Privacy & Security → Tracking. On Android, you can reset your advertising ID in Settings → Google → Ads or opt out of personalization. Disabling tracking does not stop our app from working — it only limits the third-party data we share for ad attribution.

Data Storage and Security

• Your account data is stored securely on Supabase (cloud-hosted PostgreSQL with row-level security)
• Authentication tokens are stored on your device using encrypted secure storage
• All data transmission uses HTTPS encryption
• We do not sell your personal information to third parties

Your Rights

You have the right to:

• Access your data through the App (profile, favorites, collections)
• Update your profile information at any time
• Delete your account and all associated data through the App's account settings. If you cannot access the App, you may request account deletion by emailing us
• Opt out of marketing communications at any time via the Preferences section in the App or by clicking the unsubscribe link in any marketing email
• Opt out of the Thymely chat feature by simply not using it

Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

Data Retention

• Account data is retained as long as your account is active
• When you delete your account, all associated data (profile, favorites, collections, preferences) is permanently removed
• Crash reports are retained by Sentry according to their data retention policy

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, please contact us at: Loading…