Privacy policy.

Who we are

NicheRitual (“we”, “us”) operates the NicheRitual app and website and is responsible for the personal data described here. You can reach us about privacy at [email protected].

Your account

You sign in to the app with Sign in with Apple, handled by Google Firebase Authentication. We receive an account identifier and, if you choose to share it with Apple’s sign-in, your email address (which may be an Apple private relay address) and name. We do not receive or store your Apple password.

What you create in the app

We store the content you add so it is saved to your account and available on your devices: your collection and wishlist, Ritual diary entries (what you wore, when, and your notes), results of the Choices game and your settings. This content is private to you unless you choose to share it.

If you create a public profile, your username, display name, bio and profile photo are visible to anyone, including on the web at nicheritual.com/u/your-username. Reviews and ratings you publish, and the members you follow, are public as well. Reports you submit and members you block are kept so we can act on them.

Exchange

If you use exchange, we store your listings, the offers you make or receive and the messages you send to other members. Listings are visible to other members; offers and messages are visible to the members involved. We may review exchange content when it is reported or when needed to keep the community safe.

Purchases

NicheRitual Plus is sold through Apple’s App Store. Apple processes the payment; we never see or store your card details. We receive the transaction details Apple signs for us (such as the transaction ID, product, purchase and expiry dates, and whether it is a test purchase) and verify them with Apple’s App Store Server API so we can unlock Plus and keep your subscription status up to date.

Notifications

If you allow notifications, the app registers a device token with Firebase Cloud Messaging and we link it to your account to send you the notifications you enabled, such as exchange offers and messages. You can turn notifications off at any time in iOS Settings; the token is removed when you sign out.

AI advisor

The advisor is optional and only runs after you give consent in the app. When you ask for a suggestion, we send your answers to the advisor questions, the list of candidate perfumes from our catalogue and which of them you already own to OpenAI, which generates the suggestion on our behalf. We do not send your name, email address, private notes or contact details. Under OpenAI’s API terms, this data is not used to train OpenAI’s models by default. You can stop using the advisor at any time.

Diagnostics and security logs

If crash reporting is enabled in the version of the app you use, Firebase Crashlytics collects crash reports containing technical details such as device model, iOS version, app version and the state of the app when it crashed. Our servers also keep technical logs, including IP address, time of request, app version and build, to secure the service, prevent abuse and fix problems. We do not use this data for advertising.

This website

You can browse nicheritual.com without signing in. It does not use advertising or analytics trackers or cookies for tracking. Search works over the published catalogue; search terms appear in the page address and may be recorded in normal hosting access logs, together with technical information such as IP address and browser type. Links to perfume houses open third-party websites with their own privacy practices.

How we use your data

We use personal data to provide the app’s features and sync your content, verify purchases, send the notifications you asked for, run the community and exchange, respond to reports and support requests, keep the service secure and meet legal obligations. Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running a safe and reliable service, your consent (for the AI advisor and notifications, which you can withdraw at any time) and legal obligations.

Who we share it with

We do not sell personal data or share it for advertising. We use service providers who process data on our behalf: Google Firebase (sign-in, notifications and crash reporting), Amazon Web Services (storage of photos and files in Amazon S3), our hosting provider (application servers and a Microsoft SQL Server database), Apple (Sign in with Apple and App Store purchases) and OpenAI (the AI advisor, only with your consent). Content you make public is visible to other people. We may disclose data if the law requires it or to protect the rights and safety of our members.

Where data is stored

Our providers may process data in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your account data for as long as your account is active. When you delete your account, we delete or anonymise your profile, collection, Ritual diary, wishlist, reviews, follows, exchange listings, offers and messages, profile photo and device tokens, and delete your sign-in account, within 30 days. Records we must keep by law, such as purchase and tax records, are kept for the required period. Security logs are kept for up to 90 days. Content removed through moderation may be kept for longer where needed to handle a dispute or legal claim.

Your rights and choices

You can view and edit most of your data in the app, make your profile private by not publishing it, turn off notifications and stop using the advisor. Depending on where you live, you may also have the right to access, correct, export or delete your data, object to or restrict certain processing and complain to a data protection authority. To use these rights, email [email protected]. You can delete your account at any time in the app (Profile, Settings, Delete account) or by emailing us; see account deletion.

Children

NicheRitual is not intended for children under 13, or under the minimum age required by the law where they live. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us.

Security

Data is encrypted in transit, access to our systems is restricted, and photos and files are stored in private storage that is only reachable through short-lived links. No service can guarantee perfect security, but we work to protect your data and will notify you where the law requires.

Changes to this policy

We will update this page when our practices change and show the date of the latest version at the top. If a change is significant, we will also let you know in the app.