Privacy Policy
Last updated September 1, 2026
Spritz is a fragrance library. You scan or search for a bottle and we tell you what is in it. This page explains what we collect while you do that, why we collect it, and how to get rid of it.
What we collect
Your account. When you sign up we store your email address and, if you sign in with Google, the basic profile information Google returns. Authentication is handled by Clerk. We never see or store your password.
Photos you scan. When you scan a bottle, the photo is sent to an AI vision service to read the label and to an image embedding service to compare the bottle's shape and color against our catalog. If neither can identify the bottle and you are signed in, we may send the photo to a visual search provider (Google Lens via SerpApi) to look it up on the web. We keep the photo so we can debug scans that returned the wrong answer and improve how scanning works. Stored photos are private and are not shown to other users. We do not use your photos to train any model, and we do not share them with anyone other than the providers processing that request. You can ask us to delete your photos at any time, at josh.knight@spritzofficial.online.
Photos used in the library. Some bottles in our library have no photo. If one of your scans is a clear shot of the bottle, we may review it and use it as that fragrance's library image. Only the bottle is relevant to us, so we do not use a photo that shows a person, a face, or anything else identifying, and a photo we use is never labeled with your name or account. If you would rather we did not, email josh.knight@spritzofficial.online and we will remove it and exclude your scans from this.
Your collection. The fragrances you mark as owned, tried, or wishlisted, so your shelf is there when you come back.
Usage data. Which pages you open and which features you use, via PostHog, so we know what to improve. This is tied to your account if you are signed in.
Payment information. If you subscribe, payment is processed by Stripe. Stripe handles your card details directly. We never receive or store your card number. We keep a record of your plan and billing status so we know what you have access to.
What we do with it
We use this data to run the app: identify the bottle you scanned, keep your collection, apply your subscription, answer support requests, and understand which parts of the product are working. That is the entire list.
We do not sell your personal information. We do not share it with advertisers, and we do not build advertising profiles.
Who we share it with
Only the services that make the app work, and only what each one needs:
- Clerk — authentication and account management
- Supabase — database and file storage
- Vercel — hosting and delivery
- OpenAI and Google Cloud Vision — reading the label in a scanned photo
- Voyage AI — comparing a scanned bottle's shape and color against our catalog
- SerpApi (Google Lens) — web image lookup when a bottle can't be identified from our catalog
- Stripe — payment processing
- PostHog — product analytics
We may also disclose information if we are legally required to, or to protect the safety and rights of our users.
Affiliate links
Some links to retailers are affiliate links, which means we may earn a commission if you buy something. Following one of those links takes you to the retailer's own site, where their privacy policy applies, not ours. See our affiliate disclosure for the full explanation.
How long we keep it
Account and collection data is kept while your account is open. Scan photos are kept so we can keep improving scanning, and you can ask us to delete yours at any time. Analytics data is retained in aggregate. If you delete your account, we delete your personal data, including your scan photos, within 30 days, other than anything we are required to keep for tax or legal reasons, and any photo already reviewed into the library.
Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or export it. If you are in the EU or UK, the GDPR gives you these rights explicitly, along with the right to object to processing and to complain to your local data protection authority. If you are in California, the CCPA gives you equivalent rights, and we confirm again that we do not sell personal information.
To exercise any of these, email josh.knight@spritzofficial.online, or see Delete your account for what deletion covers and how long it takes.
Security
Data is encrypted in transit and at rest by our infrastructure providers. No system is perfectly secure, but we keep the amount of personal data we hold deliberately small, which is the most effective protection available.
Children
Spritz is not intended for anyone under 13, and we do not knowingly collect information from children. If you believe a child has given us personal data, email us and we will delete it.
Changes
If we change this policy we will update the date at the top. Material changes will be announced in the app before they take effect.
Contact
Questions about any of this go to josh.knight@spritzofficial.online.