Olfana (“Olfana”, “we”, “us”, “our”) is a fragrance discovery, collection and community app operated by Velanta (Private) Limited.
Velanta (Private) Limited is the data controller for the personal data described in this policy.
This policy covers the Olfana mobile app for Android and iOS. It does not cover any third-party service, or any fragrance brand’s own website, that we may link to or mention.
| Data | When | Why |
|---|---|---|
| Email address | Registration | To create and secure your account, verify it, and let you reset your password |
| Password | Registration | Authentication only. It is handled entirely by Google Firebase Authentication — we never see, receive or store it |
| Google account identifier and email | If you sign in with Google | To authenticate you and create your account |
| Username, display name, country, and optionally city and bio | Profile creation | To identify you to other members |
| Taste profile — fragrance families, notes, intensity, occasions | Onboarding | To personalise recommendations |
| Reviews, ratings, posts and captions, comments | When you write them | They are the substance of the community |
| Lists, layering recipes, wear-diary entries, shelf entries | When you create them | Your collection and history |
| Follows, likes, saves, blocks | When you use them | The social graph, and blocking |
| Reports you file about content | When you report | Safety and moderation |
Your email address is stored separately from your public profile, in a private record readable only by you, and is never shown to other members.
AD_ID permission. We do not display advertising, we do not sell data, and we do not build advertising profiles. The identifier is present because the SDK includes it.Images of fragrances and brand logos in the Olfana catalogue are supplied by brands or licensed by Velanta. They are not user-generated content, they are not collected from you, and the user-content sections of this policy and of our Terms do not apply to them. Section 8 of the Terms explains how a rights holder raises a complaint about catalogue imagery.
| Purpose | Legal basis |
|---|---|
| Creating and operating your account | Performance of a contract |
| Publishing your content to other members as you direct | Performance of a contract |
| Keeping the service safe — moderation, reports, blocking | Legitimate interests |
| Diagnosing crashes and improving the app | Legitimate interests |
| Analytics | Legitimate interests, or consent where local law requires it |
| Complying with legal obligations | Legal obligation |
We do not sell your personal data, and we do not share it for advertising.
Service providers processing data on our instructions:
| Provider | What it handles |
|---|---|
| Google Firebase (Google LLC / Google Ireland Ltd) | Authentication, the Cloud Firestore database, Cloud Functions, Analytics, Crashlytics |
| Cloudinary | Image delivery only — see below |
Cloudinary receives no personal data from you. It stores and delivers our fragrance and brand catalogue imagery. Because your device fetches those images directly, Cloudinary’s content-delivery network will see your device’s IP address and request headers, as any image host would. No account data, content, or uploads of yours are sent to Cloudinary, because member uploads do not exist.
Other members see what you publish: your profile and the reviews, posts, lists, layerings and ratings you choose to make public. If you set your account to private, new content is restricted — but read the limitation in section 11.
Authorities, where we are legally required to disclose.
Your data is stored in the United States.
The Olfana database (Google Cloud Firestore) is located in the nam5 United States multi-region, and our Cloud Function runs in us-central1. Your data is not stored in Saudi Arabia, the UAE, Pakistan, or elsewhere in the GCC, even though Olfana is aimed at members in the Gulf. This location was fixed when the database was created and cannot be changed.
If you are in the GCC, the EU, the UK, or Pakistan, this means your personal data is transferred to and processed in the United States. These transfers rely on the contractual protections in Google’s and Cloudinary’s data processing terms, including Standard Contractual Clauses where applicable.
We intend to let members upload their own fragrance photographs. That feature does not exist in this version of Olfana, and no photograph of yours has been collected, because there is no way to send us one.
If we introduce it, we will update this policy before the feature ships, and will explain at minimum: what is stored, that images would be processed and delivered by Cloudinary, that images attached to public content are visible to other members and reachable by direct URL, that images may be reviewed for moderation, and how to delete them.
You can delete your account from Settings: scroll to the bottom of the Settings screen and tap Delete account, which is the last button, directly below Sign out. This runs on our servers and removes:
Deletion is permanent and cannot be undone. We cannot restore a deleted account or its content.
Two honest caveats:
You may be asked to sign in again before deleting. This is deliberate: it stops someone who picks up an unlocked phone from destroying your account.
If you cannot use the in-app option — for example you have lost access to your device — email olfanasupport@gmail.com from the email address on the account and ask us to delete it. We will verify that you control the account before acting, and will confirm when it is done. We aim to complete these requests within 30 days.
| Data | Retention |
|---|---|
| Account, profile and content | Until you delete it, or you delete your account |
| Reports you file | Retained after the reported content is removed, so that patterns of abuse remain visible |
| Analytics data | For the retention period configured in Google Analytics for Firebase |
| Crash reports | Per Firebase Crashlytics’ standard retention |
Deleted data may persist briefly in our providers’ routine backups before being overwritten in the ordinary course.
Depending on where you live, you may have the right to access, correct, delete, export, object to or restrict the processing of your personal data, and to withdraw consent where processing relies on it.
You may also complain to your local data protection authority — for example SDAIA in Saudi Arabia, or your national authority in the EU or UK.
If you switch your account to private, we update your existing reviews, posts, lists and layerings to reflect that. We currently cannot retroactively hide your likes and follows. Those records carry a privacy flag that our security rules prevent the app from rewriting after they are created, and fixing this requires server-side work we have not completed.
In practice, someone could still determine what you liked and whom you followed before you switched to private. We would rather tell you than let you assume otherwise.
You must be at least 16 years old to use Olfana.
Olfana is a public community product — profiles, reviews and posts are visible to other members — and it is not directed at children. We do not knowingly collect personal data from anyone under 16, and we do not operate a parental- or guardian-consent process. If you are under 16, do not create an account.
If you believe someone under 16 has created an account, contact olfanasupport@gmail.com and we will remove the account and the data associated with it.
Passwords are handled by Google Firebase Authentication and never reach our own code. Access to the database is governed by security rules that deny everything not explicitly permitted, and are tested automatically. Data is encrypted in transit and at rest by our providers.
No system is completely secure, and we do not claim otherwise.
We will update this policy as Olfana changes — in particular before introducing photograph uploads. We will notify you in the app of material changes and update the date at the top.
Velanta (Private) Limited
House No. 92, Sitara Valley Phase 3, Sheikhupura, District Sheikhupura, Punjab 39350, Pakistan
olfanasupport@gmail.com