Custos Privacy Policy

Last updated: June 13, 2026

Custos is a fragrance-collection and wear-tracking application, operated by Custos LLC (“Custos,” “we,” “us”). This Privacy Policy explains what information Custos collects, how it is used, where it is stored, when it may be disclosed, and how you can access or delete your information. It applies to the Custos web application and any related website or online service where this policy is posted or linked. Custos is operated from the United States, is provided as a free, non-commercial application, and does not charge for the app or any features.

1. Information We Collect

When you create and use a Custos account, we collect and store the following information:

1.1 Account Information

• Email address — used to sign you in, manage your account, and send account-related messages.
• Authentication data — a user ID and a securely hashed password (and, for password resets, recovery tokens), managed through our authentication provider, Supabase. Custos does not use third-party social or OAuth sign-in.

1.2 Fragrance Collection

• The bottles you add, their tiers, stock levels, and any notes you attach.

1.3 Wear Log

• The days you record wearing a fragrance, and any occasion, weather, or notes you add.

1.4 Optional Profile Information

You may choose to add optional profile details: a display name, a home location, an “about me” note, and a weekly routine. These details are optional, and Custos works without them.

• Home location and weather. If you enter a home location (latitude/longitude coordinates) or allow your device’s location when your browser prompts you, Custos uses those coordinates only to retrieve weather information from Open-Meteo, a third-party weather service, and to adapt fragrance suggestions to local weather and seasonal context, including your hemisphere. Custos does not use location for advertising, cross-site tracking, behavioral tracking, or sale of personal information, and does not use location data to track your movements, build a location history, or infer your behavior across websites or services. You can leave the home-location field blank and decline the device-location prompt; the app still works, with reduced weather personalization.

1.5 AI Feature and Local Browser Storage (optional)

“Ask Claude” is an optional feature. To use it, you provide your own Anthropic (Claude) API key, which is stored only in your browser on that device and is never stored on Custos’s servers. When you use the feature, your question and related context from your own collection are sent directly from your browser to Anthropic under your own API account, solely to answer “what should I wear” style questions about your collection. Custos’s servers do not receive or store these messages. Your recent AI-chat history is also stored only in your browser. Custos does not control Anthropic’s handling of information you submit under your own key, and you should not enter sensitive information into AI prompts. You or your browser can clear local storage at any time.

1.6 Technical Information

Custos does not use advertising, third-party analytics, or behavioral tracking. To operate the app, it uses functional browser storage (for your settings, theme, sign-in session, and the optional items described in 1.5) and a service worker so the app can load offline. Our hosting providers keep standard server logs (such as IP address and request data) to deliver and secure the service.

2. How We Use Information

Custos uses personal information and user content to:

• create, authenticate, and manage your account;
• provide the fragrance collection and wear-tracking features, and store and display your private collection, wear log, profile, and notes;
• provide optional weather-based suggestions when you choose to provide a home location;
• send account-related and service-notification emails;
• maintain the shared fragrance catalog;
• operate, maintain, secure, troubleshoot, and improve Custos; and
• comply with legal obligations and protect the rights, safety, and security of Custos, its users, and others.

We do not use your information for advertising, and we do not use your collection, wear log, or other content to train artificial-intelligence models.

3. Where Information Is Stored

Custos stores your account information and private app data with Supabase, our database, authentication, and backend hosting provider. The app’s files are served through Netlify, our web-hosting provider. Each user’s personal data is private to that user’s account and enforced at the database level, so other users cannot see your private collection, wear log, or profile. Your information may be stored in the United States or other regions where our providers operate, and our providers maintain routine backups for reliability and disaster recovery.

4. Service Providers and Disclosures

We do not sell personal information, and we do not share personal information for advertising or cross-context behavioral advertising. We disclose information only as needed to operate the app, including to the following providers:

• Supabase — database, authentication, and backend hosting.
• Netlify — hosting and delivery of the app’s files (standard server logs).
• Resend — sending operational notification emails (for example, alerting the app administrator to a new catalog submission).
• Open-Meteo — weather lookups, which receive the location coordinates described in 1.4.
• Anthropic (Claude) — only if you enable the optional AI feature with your own API key (see 1.5).
• Content-delivery network (jsDelivr) — serves a standard software library used by the app.

We may also disclose information: if required by law, subpoena, court order, or legal process; to protect the security, integrity, or operation of Custos; to prevent, investigate, or respond to fraud, abuse, or security incidents; to protect the rights, safety, or property of Custos, users, or others; in connection with a merger, acquisition, financing, reorganization, or sale of assets; or with your consent or at your direction.

5. Shared Fragrance Catalog

Custos includes a shared fragrance catalog that all users draw from. If you submit a fragrance that is not already in the catalog, that fragrance record becomes part of the shared catalog so other users can use it. The catalog is intended to contain information about fragrances, not personal information about users — please do not include personal information in catalog submissions. Catalog entries may remain available to other users even after you delete your account, but they will no longer be linked to your account, and identifying submission details (such as the submitting account) are removed when you delete your account.

6. Emails

Authentication emails — such as sign-up confirmation and password reset — are sent through Supabase. Operational notifications (for example, administrator alerts about catalog submissions) are sent through Resend, our email provider. We send only account-related and service-related emails; we do not send marketing email and do not sell or share your email address. If we ever send marketing emails in the future, we will provide the required unsubscribe options and comply with applicable email-marketing laws.

7. Cookies, Local Storage, and Tracking

Custos does not use advertising cookies, third-party analytics, pixels, advertising SDKs, or cross-site tracking. It uses functional browser storage (including a sign-in session token and your saved settings) to operate the app and keep you signed in, and a service worker for offline loading. Our hosting providers keep standard server logs as described in Sections 1.6 and 3.

8. Your Choices and Controls

8.1 Optional Information

You can use Custos without providing optional profile details (display name, home location, “about me” note, weekly routine) and without enabling the AI feature.

8.2 Accessing and Updating Information

You can review and update your collection, wear log, and profile information within the app.

8.3 Deleting Your Account

You can delete your account at any time by going to Settings → Delete my account. When you delete your account, Custos deletes or de-identifies your account and private app data — your collection, wear log, profile, and sign-in information — from active systems, and this cannot be undone. Deletion may not immediately remove information from backups, security logs, or email logs; those copies are retained only for a limited period for backup, security, and operational purposes and are not used for anything else. Fragrance records you contributed to the shared catalog may remain in the catalog but will no longer be associated with your account.

8.4 Contact Requests

You may contact us with questions or requests about your data at greydorsai@gmail.com.

9. Data Retention

We keep personal information and user content for as long as your account is active and as needed to operate and secure the service, comply with legal obligations, resolve disputes, and enforce applicable terms. When you delete your account, we delete or de-identify your private account data as described in Section 8.3. Backups and logs that may contain residual copies are retained only for a limited period and are then overwritten or deleted in the ordinary course. Shared fragrance catalog entries may remain available to other users but will no longer be associated with your account.

10. Security

Custos uses reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS), encryption of stored data by our hosting provider, and database row-level access controls that keep each user’s data private to that user’s account. However, no internet service, hosting provider, database, or electronic storage system can be guaranteed to be completely secure.

11. Children’s Privacy

Custos is a general-audience application that is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Custos, please contact us at greydorsai@gmail.com, and we will take appropriate steps to delete the information.

12. State Privacy Rights

Depending on where you live and the applicable state privacy laws, you may have rights to request access to, correction of, or deletion of certain personal information. You can exercise these rights for most data directly in the app, or by contacting us at greydorsai@gmail.com. Custos does not sell personal information and does not share personal information for cross-context behavioral advertising.

13. Availability and International Use

Custos is operated from the United States as a free, non-commercial, English-language web application. Although Custos may be accessible from other countries, we do not direct or market Custos to any specific country or region, do not use country-specific domains, and do not localize the app for specific jurisdictions. If you access Custos from outside the United States, you understand that your information may be processed in the United States and in other locations where our service providers operate.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last updated” date above. For material changes, we will provide additional notice where appropriate, such as through the app’s in-app notifications or by email.

15. Contact

Questions about this Privacy Policy or your data may be sent to:

Email: greydorsai@gmail.com
Operator: Custos LLC