Privacy Policy
Effective date: October 18, 2026
Whifflist ("we", "us") is an app for ranking the fragrances you've tried. This policy explains what information we collect, why, and the choices you have. We keep it short and plain on purpose.
The short version
- We collect only what the app needs to work: your account, your profile, and your rankings.
- We do not sell your information, show ads, or use tracking or advertising tools.
- Your list is private by default. You choose who can see it.
- You can delete your account and everything tied to it from inside the app at any time.
1. Information we collect
Account information
- Your email address and password, used to sign you in. Passwords are stored securely by our provider and we never see them.
- Your birth year, used only to confirm you are old enough to use Whifflist. We ask for your birth month and year but store only the year.
Profile information
- Your username, and optionally your name and a profile photo. Your name helps friends find you in search.
- Scent families you say you like (optional), used for recommendations.
- Your visibility setting (Public, Friends, or Private).
What you add in the app
- The fragrances you rank, where they sit in your list, and how you experienced them (owned, sampled, or smelled).
- Optional details you add, such as projection, longevity, how a fragrance wears on you, "best for" tags, and written reviews.
- Your "Want to try" list.
- Fragrances you add to the catalog when one is missing. These become visible to everyone, and we keep a record of who added them.
- Photos you post of a fragrance bottle. These are visible to everyone on Whifflist (except people you've blocked or who have blocked you), along with your username. We resize photos before upload and do not keep the original file. The first photo posted of a fragrance may be used as its picture across the app.
- Images you choose to share, such as your Top 5 card. These are made on your phone and shared through your phone's share sheet. We don't store them.
- The people you follow and who follows you, and notifications about that activity.
Safety information
- People you block, and any reports you file about another user or a photo, including the reason and any details you write. Reports are seen only by us.
Notifications
- If you allow notifications, a push token for your phone, so we can tell you about new followers and friends' list updates. You can turn this off in Profile at any time. The text of each notification is sent through Expo, the service our app is built on, which delivers it to Apple.
Information stored on your device
- If you are blocked by the age check, your device remembers this so the check can't simply be repeated. This stays on your device.
What we do NOT collect
- We do not collect your location, contacts, or browsing history.
- We do not use advertising identifiers, ad networks, or third-party analytics or tracking tools.
- Because we don't track you across other apps or websites, we treat every visitor the same whether or not their browser sends a "Do Not Track" signal.
2. How we use your information
- To run the app: sign you in, save your rankings, and show your list.
- To show your list to the people you allow (based on your visibility setting).
- To power features like recommendations, Top Rated lists, and Similar Noses (see section 3).
- To keep the community safe: enforce the age requirement, handle blocks and reports, and review reported photos.
- To respond if you contact us.
3. What other people can see
- Your username, name (if you add one) and profile photo can be seen by other users so they can find and follow you.
- Bottle photos you post can be seen by everyone on Whifflist, with your username. You can remove your photo from the fragrance page at any time.
- Your list is visible according to your setting: Public (anyone on Whifflist), Friends (people you follow who follow you back), or Private (only you). Your written reviews and your followers and following lists follow the same setting.
- Community features (like Top Rated and community averages on a fragrance page) use combined, anonymous numbers from many users. A fragrance only appears in them once at least 3 people have rated it, so your individual rankings can't be read from them.
- Similar Noses only matches you with people whose list you are already allowed to see, and only shows you people who allow theirs to be seen. A Private list is never matched.
4. Who we share information with
We share information only with service providers that help us run the app, and only as needed:
- Supabase, which hosts our database, sign-in, and file storage.
- Expo, which delivers push notifications to your phone if you turn them on.
- Apple, if you use a test version of the app through TestFlight. Apple may collect crash reports and any feedback you choose to send, under Apple's own privacy policy.
We may also disclose information if required by law, or to protect the safety of our users or others.
Links to stores
Some fragrance pages include links to buy or sample a fragrance from another website. If you buy something, we may earn a commission. We do not send your personal information to these websites. Once you leave Whifflist, that website's own privacy policy applies.
5. How long we keep information
We keep your information while you have an account. When you delete your account, we delete your account, profile, profile photo, bottle photos, rankings, lists, follows, and related data. Fragrances you added to the catalog stay in the catalog, without your name attached. Copies may remain in routine backups for a limited time before they are overwritten.
6. Your choices and rights
- Change your visibility at any time in Profile.
- Edit or remove any ranking, review, or photo at any time.
- Delete your account and its data in Profile > Delete account.
- You can also email us to ask for a copy of your information, to correct it, or to delete it. Depending on where you live (for example California or the European Union), you may have additional rights under local law, and we will honor them.
7. Children
Whifflist is not for children under 13. We ask for your birth month and year before you create an account, and we do not allow anyone under 13 to sign up. If you believe a child under 13 has given us information, contact us and we will delete it.
8. Security
We use industry-standard security provided by our hosting provider, and access rules that keep private information visible only to the people allowed to see it. No system is perfectly secure, but we work to protect your information.
9. Terms of Service
Using Whifflist is also covered by our Terms of Service, which you can read in the app under Profile > Terms of Service.
10. Changes to this policy
If we make important changes, we will update the effective date above and let you know in the app.
11. Contact
Questions or requests: whifflist@whifflist.app