This policy explains what information Essential Blend (“the app”, “we”, “us”) collects, why, and the choices you have. Essential Blend is operated by Corentin Demougeot, an independent app developer based in Finland, who acts as the data controller for the purposes of the EU General Data Protection Regulation (GDPR).
Essential Blend needs an account, because your recipes and collection are stored server-side so they follow you from one device to the next. When you create one we collect your email address and a password. Authentication is handled by Supabase; your password is stored only as a salted hash and is never visible to us. We send short numeric codes to your email to confirm your address and to reset your password.
If you save recipes or build an oil collection, we store that content so it syncs across your devices. This includes recipe names, the ingredients and quantities in each blend, any notes you add, your “owned”, “to buy” and “favorite” oil lists, any expiration dates you assign to your owned oils, and the timestamps of those items.
During onboarding we ask for an optional display name (used to greet you in the app) and a few optional, skippable questions: how you found us, what you use essential oils for, how often you use them, your age range, and how you describe your gender. These help us understand our audience. You can skip any of them, and your answers are stored with your account.
If you subscribe to Essential Blend Pro, the purchase is processed by the Apple App Store or Google Play and managed through RevenueCat. We receive your subscription status and a purchase identifier tied to your account so your Pro access follows you across devices. We never receive or store your card or payment details. Those stay with Apple or Google.
When you submit a bug report, an idea, or an optional reason when deleting your account, we store the message together with your app version and device platform (for example “iOS 18.5”) so we can reproduce and fix issues. Feedback sent from inside the app is linked to your account.
Some data (a cached copy of your recipes and collection, your measurement-unit preference, and whether biometric unlock is enabled) is stored locally on your device and is removed when you uninstall the app.
We do not use your data for automated decision-making or profiling, and we do not sell or rent it to anyone.
We rely on a small number of trusted providers (“sub-processors”) to run the app. Each only processes the data needed for its role:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Accounts, database & sync | Email address, account, display name, recipes, collection, onboarding answers, feedback |
| RevenueCat | Subscription management | Account identifier, purchase status |
| Apple App Store / Google Play | Payment processing for purchases | Handled by Apple/Google under their terms |
| Resend | Sending confirmation & reset emails | Email address, code |
| OVH | Website hosting (eoblend.com) | Standard web-server request logs |
Some of these providers may process data on servers outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We keep your account and content for as long as your account is active. When you delete your account, your saved recipes and oil collection are permanently removed. Backups and provider logs may persist for a short period before being overwritten. Feedback messages may be retained in aggregate to track fixes, disassociated from your account after deletion.
Under the GDPR you have the right to access, correct, export, and delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing relies on it. You can:
If you believe we have mishandled your data, you may lodge a complaint with your local data protection authority: in Finland, the Office of the Data Protection Ombudsman.
Data is transmitted over encrypted HTTPS connections and access to accounts is protected by your password and, optionally, biometric unlock on your device. No system is perfectly secure, but we work with reputable providers and keep the data we hold to the minimum needed.
Essential Blend is not directed at children and is intended for users aged 16 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy as the app evolves. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app.
Questions about this policy or your data? Email dev@eoblend.com.
© 2026 Essential Blend