Privacy
Privacy
Eau de Over recommends a fragrance for your day and tells you how it is doing on your skin. It does that on your phone. This page says exactly what leaves the phone, where it goes, and how to remove it — and, for the Club, what this website collects.
The short version
- The engine, the fragrance catalogue and your journal live on your phone. The app works without an account.
- If you sign in, your journal, wardrobe and wishlist are backed up to your account so they follow you to a new phone. Nothing else is.
- There are no ads, no analytics, no tracking and no data sale. We do not use your data to train any model.
- You can export your journal or delete your account from inside the app at any time.
- This website sets no cookies and runs no analytics. If you join the Club, we keep your email (and a handle and favourite, if you give them) to send your early-access invite.
What leaves your phone
| Data | When | Where it goes | Why |
|---|---|---|---|
| Your approximate position: city level, rounded to two decimal places (about 1 km) | When Eau de Over fetches today's weather | Open-Meteo (weather service) receives only the rounded position, with no account or identifier, and we do not send it anywhere else | Today's temperature and humidity feed the modelled wear times |
| The same rounded position, stored with each wear | When you log a wear | Your journal on your phone; if you sign in, also your account (Supabase), readable only by you | So a wear is a record of the conditions it was worn in |
| Email address | Only if you sign in | Our account provider (Supabase) | To send your sign-in link and code |
| Journal: what you wore, when, how many sprays and where on the body, the weather, approximate location and occasion at the time, your ratings, and any note you add | Only if you sign in | Your account (Supabase), readable only by you | So your journal survives losing or replacing your phone, and so your skin calibration can be rebuilt |
| Wardrobe and wishlist | Only if you sign in | Your account, readable only by you | Same |
| Handle and display name | Only if you sign in and choose them | Showcase, visible to other signed-in Eau de Over users | So people know whose collection they are looking at |
| Showcase posts and cards: the fragrance's name, house, year and concentration, plus your own counts (wears, share of your year) | When "Post my wears" is on, or when you post a card | Showcase, visible to other signed-in Eau de Over users | The Showcase is where collectors share what they wear |
| A report you make about a Showcase post or profile: what you reported, the reason you chose, any note you add, and your account | Only if you tap Report | Our database (Supabase). Only we can read it; the person you reported is not told who reported them | So we can review it and act |
| People you block | Only if you tap Block | Your account, readable only by you | So their posts and Rotation stay out of your Showcase |
What never leaves your phone: your calendar (read on the phone to understand the shape of your day, never stored or sent), and anything in your journal when you are not signed in.
Location: Eau de Over uses your approximate location, never your precise one. The phone rounds it to city level (two decimal places, about 1 km) before it is used for the weather, stored with a wear or synced to your account. The last position is kept on the phone so the next weather reading works offline. The place name you see is looked up by Apple's geocoder on your phone from that rounded position. Your location is never shared publicly.
What is never published to the Showcase, by design and enforced by the database: where you were, the weather, the occasion, your notes, who you were with, and how many sprays you used or where.
Who can see your data
Your journal, wardrobe and wishlist are protected by row-level security: each record can be read and written only by the account that owns it. Showcase content is visible to signed-in users only. It is not indexed by search engines and there is no public web page for any profile.
The Club sign-up
The form on this website is the only thing here that collects anything.
| Data | Required? | Why |
|---|---|---|
| Email address | Yes | To send your TestFlight invite and early-access news — nothing else |
| Handle you'd like | Optional | To hold it for you when accounts open |
| What you wear most | Optional | So we know what the first members wear, and to draw your Founding Member card |
| Your founding number and invite code | Made for you | Your place in the order members joined, used to send invites in that order; it is not shown anywhere. Your invite code is the ?ref= in your invite link |
| Who invited you | Only if you arrived by an invite link | So the member who invited you can see how many friends joined. They see a count, never who |
- Where it's kept: in our database at Supabase, the same provider that hosts accounts. The list cannot be read through the website: the form can only add your row, and no one can look anyone up through it.
- What we don't do: no marketing lists, no sharing, no selling, no tracking pixels in our emails.
- On this device: after you join, the page keeps your founding number, invite code, handle and pick in your browser's local storage, so your card and your friends count are there when you come back. It never leaves your browser except to ask for that count. "Not you?" on the card clears it.
- How to leave: reply to any Club email, or write to the address below, and your row is deleted.
This website
No cookies, no analytics, no third-party scripts. Fonts are served from this site. The only thing stored in your browser is your Club card, and only after you join. The host keeps the standard short-lived server logs any website has.
The fragrance numbers on this site are modelled from each fragrance's notes. Fragrance names are trademarks of their respective houses; Eau de Over is independent and not affiliated with any of them.
Reporting and blocking
You can report any Showcase post or profile that is not yours, and block anyone. A report stores your account, what you reported, the reason you picked (spam, offensive, impersonation or other) and any note you add. Only we can read reports; the person reported is not told who reported them. A post reported by three different people is hidden from the Showcase until we have reviewed it. We may dismiss a report, hide a post, or stop an account from posting. Blocking is private: the person is not told, and their posts and Rotation disappear from your Showcase. You can unblock them in Settings. The rules for posting are in the Terms of Use.
Processors
- Supabase — account and database hosting, and the Club list.
- Open-Meteo — weather forecasts from your rounded, city-level position, with no account and no identifier.
- An email delivery service, used only to send sign-in emails and Club invites.
Keeping and deleting
Your data is kept while your account exists. Settings → Account → Delete account removes your account, your journal, wardrobe, wishlist, profile, posts, reactions, blocks and reports you made from our servers and wipes the copy on your phone. Export my journal in the same place gives you everything as a file first. A Club row is kept until you ask us to remove it or the Club ends.
Children
Eau de Over is not directed at children under 13 and we do not knowingly collect their data.
Changes and contact
If this policy changes, the effective date above changes with it, and a material change is announced in the app.
Questions or requests: privacy@eaudeover.com. Using the app is also covered by our Terms of Use.