Privacy Philosophy & Architecture
Parfumier is published and operated by Cece Studios (“we”, “us”, or “our”), a digital product studio registered in England and Wales. We have engineered Parfumier with an uncompromising privacy architecture:
Zero Accounts
No email registration, no phone numbers, and no passwords. You enter the atelier instantly upon install.
Offline-First Storage
Your entire shelf, wear logs, prices, and notes reside locally on your device in high-speed, sandboxed MMKV storage.
Zero User Tracking
We never sell, broker, or monetize your personal data. We do not prompt for Apple App Tracking Transparency (ATT).
The Data Controller
Under the United Kingdom General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and European Union Regulation (EU) 2016/679 (EU GDPR), the Data Controller responsible for the processing of your data is:
United Kingdom
Official Website: https://cecestudios.co.uk
Data Protection & Legal Enquiries: legal@cecestudios.co.uk
Technical & Customer Care: support@parfumier.app
Information We Never Collect
To provide complete transparency, Parfumier operates without collecting any of the following sensitive personal data:
- No Identity Accounts: No user registration, real names, usernames, or passwords.
- No Contact Details: No email harvesting, phone numbers, or physical address scraping.
- No Financial Details: Payment cards and banking details are handled strictly by Apple StoreKit.
- No Advertising Trackers: No IDFA, ad-network SDKs, or cross-app data broker brokers.
- No Persistent Photos on Cloud: Scanned shelf photos are processed statelessly and discarded.
- No Background Location: We never monitor, log, or track your movements throughout the day.
Information We Process & Technical Architecture
A. Personal Collection & Scent Diary (Local MMKV Storage & Private Apple iCloud)
Data elements: Fragrance bottle entries (brand, fragrance title, concentration, bottle volume, acquisition date, status: Owned, Decant, or Wishlist), purchase prices, fill levels, wear logs (Scent of the Day timestamp, morning/evening tags), streak calculations, star ratings, custom olfactory pyramids, and user-taken bottle photographs.
Storage architecture: All collection records are saved directly onto your device inside the application’s sandboxed local filesystem and encrypted key-value store (react-native-mmkv). Cece Studios operates no private database servers, retains no server replicas, and has zero direct access to your collection entries.
If you enable iCloud backup, Parfumier creates an encrypted backup snapshot (backup-v1.json) transmitted directly to your personal Apple iCloud Drive ubiquity container (iCloud.com.parfumier.app). This data is governed by your personal Apple ID agreement and Apple’s security standards. Cece Studios cannot view, intercept, or decrypt your iCloud backups.
B. Coarse Geographic Location (Weather-Matched Scent Suggestions)
Purpose: Parfumier pairs your fragrance wardrobe with local meteorology (temperature, humidity, atmospheric pressure, and rain/snow) to generate daily morning scent suggestions (e.g. recommending fresh citrus/aquatics in warm sun or deep amber/woods in cold rain).
Privacy safeguards:
- Foreground only: Location access is only invoked when the app is active or when a scheduled daily nudge prepares local suggestions.
- Low precision: Coordinates are rounded on-device to two decimal places (~1.1 km resolution). Precise GPS street addresses are never determined or recorded.
- Zero remote storage: Rounded coordinates are passed directly to the OpenWeatherMap API to fetch weather parameters and cached locally in MMKV. They are never sent to or logged on Cece Studios servers.
- Optional manual override: You may deny iOS location permissions and manually select your city in Settings, or use the app completely offline without weather matching.
C. In-App Purchases & Membership Subscriptions (StoreKit & RevenueCat)
Offerings: Parfumier offers optional Pro membership subscriptions:
Payment processing: All billing, receipt generation, and subscription renewals are managed exclusively by Apple StoreKit through your Apple ID account. Cece Studios partners with RevenueCat solely to validate encrypted App Store purchase receipts and unlock Pro entitlements on your device.
Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current billing cycle or trial period. Your Apple ID account will be charged for renewal within 24 hours prior to the conclusion of the current period.
To cancel your subscription: Open the iOS Settings app → tap your Apple ID profile → tap Subscriptions → select Parfumier → tap Cancel Subscription.
✦ Our Ethical Guarantee: Your collection data is never held hostage. All bottle tracking, shelf curation, and wear logging remain 100% free and unlimited forever, even if your Pro subscription lapses.
D. Vision Shelf & Screenshot Scanning (Stateless AI Processing)
Purpose: To save you from manual data entry, Parfumier allows you to snap a photo of your perfume shelf or upload a wardrobe screenshot from Fragrantica, Parfumo, or Apple Notes.
Stateless technical pipeline:
- Your device strips all EXIF metadata and GPS tags before image transmission.
- The compressed image is sent over encrypted TLS 1.3 to the Google Gemini 2.5 Flash-Lite API (via a stateless Cloudflare Worker proxy in production).
- The AI model extracts visible text and bottle silhouettes to return a structured JSON list of fragrance names and houses.
- Zero Image Retention: The image bytes are processed entirely in transient volatile server memory and immediately purged upon response completion. Your photos are never stored on server disks, never logged, and never used to train artificial intelligence or machine learning models.
- Candidate matching occurs deterministically on your device against the local catalog.
E. Anonymous Usage Analytics & Diagnostics (PostHog EU)
To measure core product retention (e.g. Day-1 and Day-7 retention) and identify crashes, Parfumier utilizes PostHog hosted within the European Union (https://eu.i.posthog.com).
- Anonymous installation identifier: Associated exclusively with a random UUID (
installId) generated locally upon first boot. It is never linked to your name, email, or Apple ID. - Event telemetry: We track high-level product actions such as
app_opened,sotd_logged,onboarding_completed, andtray_exported. - Strict session replay privacy: Diagnostic replays are masked by default (
maskAllTextInputs: true,maskAllImages: true) and captured at a low 20% sample rate. Personal prices or notes are never recorded. - Instant user opt-out: You can completely disable analytics at any time by toggling “Share Anonymous Usage Data” to OFF in
Settings > Privacy & Analytics.
Legal Bases under UK & EU GDPR
In accordance with Article 6 of the UK GDPR and EU GDPR, Cece Studios relies on the following lawful bases for processing personal data:
| Processing Purpose | Data Categories | Lawful Basis (UK GDPR) |
|---|---|---|
| Fragrance Wardrobe & SOTD Tracking | Bottles, wear logs, ratings, notes, prices | Performance of Contract (Article 6(1)(b)) |
| Weather-Matched Scent Suggestions | Coarse latitude & longitude (rounded) | Consent (Article 6(1)(a) via iOS dialog) |
| Vision Shelf Photo Scanning | User-selected photo/screenshot (transient) | Consent (Article 6(1)(a) via user trigger) |
| Pro Subscription Entitlements | Anonymous StoreKit receipts, status | Performance of Contract (Article 6(1)(b)) |
| App Stability & Telemetry | Crash traces, anonymous interactions | Legitimate Interests (Article 6(1)(f)) |
Apple Privacy Nutrition Label Declarations
As declared in App Store Connect and in the official iOS privacy manifest (PrivacyInfo.xcprivacy):
Parfumier does not link any collected data types to your personal identity.
Third-Party Sub-Processors & Infrastructure
To provide specific services, Parfumier interacts with carefully vetted sub-processors under strict contractual terms:
Data Retention & Complete Erasure
Because Parfumier operates with an on-device architecture, you hold absolute sovereignty over data retention:
- Active retention: Your collection, wear logs, and preferences persist on your physical device until you modify or delete them.
- 1-Tap complete local erasure: You can completely destroy all local collection records, wear histories, and custom images at any time by navigating to
Settings > Clear All Local Data. - Uninstalling the app: Deleting the Parfumier app from your iOS device immediately and permanently deletes all local MMKV storage and sandboxed documents.
- iCloud backup deletion: You can delete iCloud backups at any time via your device’s native iOS settings under
Apple ID > iCloud > Manage Storage > Parfumier.
Your Rights under UK & EU GDPR
You possess statutory data protection rights under the UK GDPR and Data Protection Act 2018. Parfumier implements these rights directly into the application interface:
Export your entire fragrance wardrobe, pricing ledger, and wear logs at any time in standardized JSON and CSV formats directly from Settings > Data Export.
Instantly purge your entire history via Settings > Clear All Local Data. Because we maintain no external servers with your identity, erasure is immediate and complete.
You can modify, update, or correct any bottle attribute, concentration, fragrance house, custom note pyramid, rating, or wear date directly inside the app at any time.
You may object to analytics processing by switching off telemetry in Settings, and you may revoke camera or location permissions in iOS Settings at any time.
International Transfers & Technical Security
Where limited non-identifying telemetry or transient API requests (e.g., weather queries or stateless vision scanning) involve transfers outside the UK or European Economic Area, Cece Studios ensures appropriate safeguards are enacted:
- Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum (IDTA).
- Encryption in transit using industry-standard TLS 1.3 protocol.
- PostHog telemetry hosted natively inside the European Union (Germany).
Children’s Privacy
Parfumier is not directed to individuals under the age of 13 (or under 16 where required by applicable UK/EEA member state law). We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us immediately at legal@cecestudios.co.uk so we can take appropriate measures.
Contact Cece Studios
If you have questions, feedback, or requests regarding this Privacy Policy or your data protection rights, please reach out to our dedicated legal and engineering teams: