Privacy Policy
This policy explains what information Essential Blend (“the app”, “we”, “us”) collects, why, and the choices you have. Essential Blend is operated by Corentin Demougeot, an independent app developer based in Finland, who acts as the data controller for the purposes of the EU General Data Protection Regulation (GDPR).
Information we collect
Account information
Essential Blend needs an account, because your recipes and collection are stored server-side so they follow you from one device to the next. When you create one we collect your email address and a password. Authentication is handled by Supabase; your password is stored only as a salted hash and is never visible to us. We send short numeric codes to your email to confirm your address and to reset your password.
Content you create
If you save recipes or build an oil collection, we store that content so it syncs across your devices. This includes recipe names, the ingredients and quantities in each blend, any notes you add, your “owned”, “to buy” and “favorite” oil lists, any expiration dates you assign to your owned oils, and the timestamps of those items.
Profile and onboarding
During onboarding we ask for an optional display name (used to greet you in the app) and a few optional, skippable questions: how you found us, what you use essential oils for, how often you use them, your age range, and how you describe your gender. These help us understand our audience. You can skip any of them, and your answers are stored with your account.
Subscription information
If you subscribe to Essential Blend Pro, the purchase is processed by the Apple App Store or Google Play and managed through RevenueCat. We receive your subscription status and a purchase identifier tied to your account so your Pro access follows you across devices. We never receive or store your card or payment details. Those stay with Apple or Google.
Advertising measurement
We sometimes pay to advertise Essential Blend on the App Store. When you install the app after tapping one of those ads, Apple gives the app a token identifying which campaign and search term led you here — never who you are. The app passes it to RevenueCat so we can see whether the people who arrive from a given ad go on to find the app useful, and therefore whether it is worth paying for that ad at all.
To be clear about what this is not: it tells us nothing about you as a person, nothing about your activity in other apps or on the web, and nothing that we could use to target you. It is not shared with advertisers or ad networks, and it is not combined with data from anyone else. Apple does not require your tracking permission for this, because it is Apple reporting back to us on our own advertising rather than anyone following you between apps.
Feedback you send
When you submit a bug report, an idea, or an optional reason when deleting your account, we store the message together with your app version and device platform (for example “iOS 18.5”) so we can reproduce and fix issues. Feedback sent from inside the app is linked to your account.
On-device data
Some data (a cached copy of your recipes and collection, your measurement-unit preference, and whether biometric unlock is enabled) is stored locally on your device and is removed when you uninstall the app.
What we do not collect
- No ads in the app, and no tracking. Essential Blend shows you no advertising, contains no ad networks or analytics SDKs, and carries no third-party trackers. We do not follow you across other apps or websites. The one exception is measuring our own App Store ads, described under “Advertising measurement” above.
- No biometric data. Face ID / fingerprint unlock is performed entirely by your device’s operating system. The app is only told whether authentication succeeded; it never sees or stores your biometric data.
- No access to your photos. The photo-library permission is used only to save a recipe image you export; the app cannot read your existing photos.
- No location, contacts, or microphone data.
How we use your information
- To create and secure your account and sign you in (lawful basis: performance of a contract).
- To store and sync your recipes and oil collection across your devices (contract).
- To provide and restore your Pro subscription (contract).
- To send you essential service emails such as confirmation and password-reset codes (contract).
- To fix bugs and improve the app based on feedback you choose to send (legitimate interest).
- To understand our audience and improve the app, using the optional onboarding answers you choose to provide (legitimate interest).
- To measure whether our own App Store advertising works, so we do not keep paying for ads that do not reach the right people (legitimate interest).
We do not use your data for automated decision-making or profiling, and we do not sell or rent it to anyone.
Who processes your data
We rely on a small number of trusted providers (“sub-processors”) to run the app. Each only processes the data needed for its role:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Accounts, database & sync | Email address, account, display name, recipes, collection, onboarding answers, feedback |
| RevenueCat | Subscription management & ad measurement | Account identifier, purchase status, App Store ad campaign the install came from |
| Apple App Store / Google Play | Payment processing for purchases | Handled by Apple/Google under their terms |
| Apple Ads | App Store advertising & its measurement | Campaign and search term that led to an install; no personal data |
| Resend | Sending confirmation & reset emails | Email address, code |
| OVH | Website hosting (eoblend.com) | Standard web-server request logs |
Some of these providers may process data on servers outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep your account and content for as long as your account is active. When you delete your account, your saved recipes and oil collection are permanently removed. Backups and provider logs may persist for a short period before being overwritten. Feedback messages may be retained in aggregate to track fixes, disassociated from your account after deletion.
Your rights
Under the GDPR you have the right to access, correct, export, and delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing relies on it. You can:
- edit your recipes and collection directly in the app;
- delete your account and its data from Settings → Delete account;
- contact us at dev@eoblend.com to exercise any of the rights above.
If you believe we have mishandled your data, you may lodge a complaint with your local data protection authority: in Finland, the Office of the Data Protection Ombudsman.
Security
Data is transmitted over encrypted HTTPS connections and access to accounts is protected by your password and, optionally, biometric unlock on your device. No system is perfectly secure, but we work with reputable providers and keep the data we hold to the minimum needed.
Children
Essential Blend is not directed at children and is intended for users aged 16 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the app evolves. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app.
Contact
Questions about this policy or your data? Email dev@eoblend.com.