1. Who We Are and What This Covers

This Privacy Policy explains how ScentRX, Inc., a Texas corporation (“ScentRX,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information.

This Policy applies to:

• The website at scent-rx.com

• The ScentRX mobile and web application at scent-rx.com

• Any related services, features, or content we provide (together, the “Service”)

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Account and Identity Information

What we collect: Email address and/or mobile phone number, display name, username, profile information you choose to add, and authentication tokens

Why we collect it: To create and secure your account, to deliver one-time passcodes (OTP) for login, to keep you signed in, and to communicate with you about your account

Where it comes from: Directly from you at signup, or from a third-party sign-in provider (Google, Apple, or Facebook) when you choose that option

Who we share it with: Our authentication, messaging, and infrastructure providers; third-party sign-in providers you elect to use

A note on how we log you in. ScentRX uses passcode-based authentication. We do not ask you to create or store a password. When you log in, we send a one-time passcode to the email address or mobile number associated with your account. If you sign in through Google, Apple, or Facebook, we receive basic profile information from that provider in accordance with your settings with them, and we do not receive your password for that service.

2.2 Fragrance Preference Data

What we collect: Scent notes you like or skip, fragrance families and brands you select during onboarding or later, vibes and blends you engage with, RX cards you view, save, copy, or share, and how you rate or react to recommendations

Why we collect it: To personalize your feed, to generate and improve fragrance recommendations, and to understand which content performs well on the Service

Where it comes from: Directly from you and from your activity on the Service

Who we share it with: Our cloud infrastructure, analytics, and AI processing providers

2.3 Virtual Scent Shelf and Wishlist Data

What we collect: The fragrances and products you add to your Virtual Scent Shelf, the items you add to your Wishlist, and any notes or details you attach to them

Why we collect it: To operate the Shelf and Wishlist features and to generate layering recommendations based on what you already own

Where it comes from: Directly from you

Who we share it with: Our cloud infrastructure and AI processing providers

Your Wishlist and Virtual Scent Shelf is private and is visible only to you.

2.4 Content You Create and Publish

What we collect: RX cards you create, including product selections, layering instructions, vibe labels, captions, images, and any links you add; comments, follows, and other social activity

Why we collect it: To publish and distribute your content on the Service as you direct, to attribute it to you, and to allow other users to view, save, share, and copy it

Where it comes from: Directly from you

Who we share it with: Other users of the Service, and any third-party platform you choose to share to

Content you publish is public. RX cards you post, your display name, your profile, and your public activity can be seen by other users and by visitors, and may be surfaced in feeds, Discover, search results, and shared links. Do not include information in published content that you would not want to be public.

2.5 Subscription and Payment Information

What we collect: Subscription tier, trial and billing status, renewal dates, and transaction records

Why we collect it: To provision the access you have purchased, to administer free trials, to prevent fraud and abuse, and to keep records required for tax and accounting purposes

Where it comes from: From you and from the app store through which you subscribed

Who we share it with: Apple, Google, and our accounting and tax providers

We do not collect, process, or store your payment card information. Subscriptions are sold through the Apple App Store and the Google Play Store. Your payment details are provided directly to Apple or Google, and their handling of that information is governed by their own privacy policies. We receive only confirmation of your subscription status and non-identifying transaction records.

2.6 Device, Log, and Usage Information

What we collect

IP address, device type and identifiers, operating system, app version, browser type, time zone, screens viewed, features used, session duration, and crash and error data

Why we collect it

To operate and secure the Service, to diagnose problems, to measure performance, and to prevent fraud and abuse

Where it comes from

Collected automatically when you use the Service

Who we share it with

Our infrastructure and hosting providers

2.7 Communications and Support

What we collect

The contents of messages you send us, your contact details, and records of our correspondence

Why we collect it

To respond to your questions, provide support, and maintain a record of the issue

Where it comes from

Directly from you

Who we share it with

Our customer support and email providers

2.8 Approximate Location

We may infer your general location (country, state, or city) from your IP address in order to comply with regional legal requirements, present relevant currency and retailer options, and detect fraud. We do not collect precise GPS location.

3. How We Use Your Information

We use the information described above to:

• Create, authenticate, and secure your account

• Operate the Service and its features, including the RX feed, Discover, the Virtual Scent Shelf, the Wishlist, and the RX Builder

• Generate and improve fragrance recommendations and layering suggestions

• Personalize the content you see

• Process subscription payments, administer free trials, and manage billing

• Deliver and measure advertising on the Service

• Attribute creator content and calculate affiliate activity

• Communicate with you about your account, transactions, security, and changes to the Service

• Send you marketing communications where you have consented or where otherwise permitted by law

• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service

• Comply with legal obligations and enforce our agreements

• Analyze usage to understand and improve the Service

4. Automated Processing and AI-Generated Recommendations

ScentRX uses automated systems, including machine learning models, to generate fragrance and layering recommendations and to personalize what you see.

What information feeds these systems. Recommendations may be generated using the fragrances on your Virtual Scent Shelf, the notes and brands you have liked or skipped, your Wishlist, the RX cards you have saved, copied, or engaged with, your stated preferences, and aggregate patterns across users of the Service.

What the outputs are. Automated systems may generate suggested fragrance blends, suggested products, ranked feeds, and recommended creators to follow. Some content on the Service is generated by automated systems rather than by a human creator. Where required, such content is identified as automatically generated.

Model improvement. We may use your information to develop and improve our recommendation models. Where we use information for this purpose, we use it in aggregated or de-identified form except where doing so would defeat the purpose of the feature.

Third-party AI providers. To generate recommendations, we transmit information to OpenAI, L.L.C., which provides machine learning and language model services to us. OpenAI processes this information on our behalf and is contractually restricted from using it for purposes other than providing the service to us. 

Limits. These systems produce suggestions, not professional advice. Recommendations are not medical, dermatological, or allergen guidance. See our Terms of Service for further important limitations.

Your choices. Personalization is a core function of the Service and cannot currently be turned off separately from using the Service. You may delete items from your Virtual Scent Shelf and Wishlist, change the notes and brands you have selected, and delete your account at any time. If we introduce additional personalization controls, we will describe them here.

5. [!] Phone Numbers, Text Messages, and Email

Transactional messages. If you provide a mobile number, we use it to send one-time passcodes for logging in and to send security and account notifications. These messages are necessary to operate your account and are not marketing messages. Message and data rates may apply. You cannot opt out of these messages while maintaining an account authenticated by phone; you may instead switch your account to email-based authentication.

Marketing messages. We will send marketing text messages only if you separately and affirmatively consent. If you consent, you may opt out at any time by replying STOP to any marketing message, or by adjusting your notification settings. Reply HELP for assistance. Consent to marketing messages is not a condition of using the Service or of any purchase.

Email. We send transactional emails relating to your account, authentication, and billing. You may unsubscribe from marketing emails at any time using the link in those emails or through your account settings; you will continue to receive transactional emails.

6. When and With Whom We Share Information

We share personal information in the following circumstances:

Service providers. We share information with vendors who perform services on our behalf, including cloud hosting and infrastructure, authentication, SMS and email delivery, payment processing, analytics, advertising, customer support, and machine learning services. These providers are permitted to use your information only to provide services to us.

Other users and the public. Content you publish, your display name, your profile, and your public activity are visible to other users and may be publicly accessible.

Third-party platforms you share to. If you share an RX card to Instagram, TikTok, or another platform, the shared content and any associated information are transmitted to that platform and are then governed by that platform’s terms and privacy policy.

Retailers and affiliate partners. When you follow a shoppable link from the Service, information such as a referral identifier and the fact of your click may be transmitted to the retailer and to our affiliate network so that transactions can be attributed. Once you leave the Service, the retailer’s own privacy practices apply.

Advertising partners. We share device and usage information with advertising partners to deliver and measure advertising. See Section 7.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any material change to this Policy.

Legal and safety. We may disclose information where we believe in good faith that disclosure is necessary to comply with law or legal process, to enforce our Terms of Service, to detect or prevent fraud or security issues, or to protect the rights, property, or safety of ScentRX, our users, or the public.

With your direction or consent. We share information in other ways when you direct us to or consent.

7. Advertising and Analytic

At launch, the Service does not use third-party advertising networks or third-party analytics providers. We do not share your personal information with advertisers or ad networks, and we do not use third-party trackers to build advertising profiles about you.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law, or engage in targeted advertising as defined under the privacy laws of Texas and other states.

We honor Global Privacy Control signals.

If we introduce advertising or third-party analytics in the future, we will update this Policy, provide notice before the change takes effect, and provide an opt-out mechanism where required by law.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to:

• Keep you logged in and maintain your session

• Remember your preferences and settings

• Diagnose errors and maintain the security of the Service

We do not currently use advertising cookies or third-party tracking pixels. You can manage cookies through your browser settings. Blocking some cookies will affect how the Service functions, including your ability to remain logged in.

9. How Long We Keep Information

We retain personal information for as long as your account is active and for as long as needed to provide the Service. After you delete your account we delete or de-identify your personal information within [90] days, except that we retain:

• Transaction and billing records for as long as required by tax and accounting law

• Information necessary to resolve disputes, enforce our agreements, prevent fraud, or comply with legal obligations

• Aggregated or de-identified information, which is not linked to you and which we may retain indefinitely

Content you published may remain visible where other users have copied, saved, or shared it, and where it has been distributed to third-party platforms.

10. Your Privacy Rights

We extend the rights below to all users in the United States, regardless of state. Residents of states with comprehensive privacy laws, including Texas, California, Colorado, Connecticut, Virginia, Oregon, and others, have these rights by statute.

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you

• Correct inaccurate personal information

• Delete your personal information

• Port your personal information to another service

• Opt out of the sale or sharing of your personal information and of targeted advertising

• Limit the use of sensitive personal information

• Withdraw consent where processing is based on consent

• Non-discrimination for exercising any of these rights

How to exercise them. Submit a request through your account settings or email us at team@scent-rx.com. We will verify your identity before acting on a request, typically by confirming control of the email address or phone number on your account. We respond within the timeframe required by applicable law, generally 45 days, and may extend where permitted.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authority and may require you to verify your identity directly.

Appeals. If we decline your request and you live in a state that provides an appeal right, you may appeal by emailing team@scent-rx.com with the subject line “Privacy Appeal.” We will respond within the time required by your state’s law.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and 18, you may use the Service only with the permission of a parent or legal guardian. You must be at least 18 to purchase a subscription. If we learn we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us information, contact us at team@scent-rx.com.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and passcode-based authentication. No system is completely secure, and we cannot guarantee the security of information transmitted to or from the Service.

13. Where We Operate

The Service is offered in and directed to users in the United States only. Information is collected, stored, and processed in the United States. We do not currently offer the Service to users in the European Economic Area, the United Kingdom, or Switzerland, and we do not knowingly collect personal information from residents of those regions.

14. Changes to This Policy

We may update this Policy. When we do, we will revise the “Last Updated” date above. If we make material changes, we will provide notice through the Service or by email before the changes take effect. Your continued use of the Service after the effective date of a change means you accept the updated Policy.

15. Contact Us

Questions, requests, or complaints about privacy:

Email: team@scent-rx.com

Mail: ScentRX, Inc., 1942 W Gray St, Ste 1321, Houston, TX 77019, United States