1. Who we are
Frags ("Frags," "we," "us") is an iPhone app and this website for people who collect perfume: a fragrance catalog, shelves for the bottles you have, want or had, price tracking across US sellers, and trading between members (the "Service"). Frags is operated by Drexo LLC, a Texas limited liability company, and is offered to people in the United States.
This policy says what we collect, why, who processes it for us, and how to get it deleted. Questions go to support@fragsapp.com.
2. What we collect
What you give us
- Account. If you sign up with email, your email address and a password (we store only a one-way hash of it). If you use Sign in with Apple, Apple gives us a stable identifier for your account and — only if you choose to share them — your name and email, which may be Apple's private relay address. When you delete your account we also ask Apple to revoke that sign-in.
- Profile. A display name, a handle, an optional short bio and picture, and whether your profile is public. Your email is never shown to other members.
- Your collection and activity. The perfumes on your Have, Want and Had shelves (with bottle size), your ratings and votes, classifications and suggestions you contribute, comments, who you follow, and who you've blocked.
- Trades and messages. Bottles you list for trade (photos, fill level, batch code if you add it), the trades you propose and accept, the messages and photos in trade chats and in direct messages, and the ratings you give and receive after a trade.
- Price tracking. Which perfumes and sizes you track, and your notification switches.
- Photos you send to identify a bottle and the questions you type to the advisor (Pro features).
- Support and reports. What you write when you send feedback, report a perfume, a comment, a listing or a member, or contact us by email.
What we collect automatically
- Push token. The device token Apple issues so we can send notifications (price drops, trade matches and messages, and the occasional "how was it?" nudge, each of which you can switch off in Settings).
- App Attest. To keep automated abuse out, the app proves it is a genuine copy of Frags on real Apple hardware. We keep the key identifier, the public key and a counter Apple's system produces. This is not a device fingerprint and identifies nothing about you personally.
- Request logs. Your IP address, the request made, the app version and timing — used for security, rate limiting and fixing bugs, and kept only briefly.
- Usage allowances. Daily counts of advisor messages and identify photos, so Pro limits can be applied.
What we receive from others
- Apple, when you subscribe in the app: the transaction and subscription status (active, renewed, expired, refunded). We never see your card.
- Stripe, when you subscribe on this website: a customer identifier, the subscription's status and period, and whether a payment succeeded, failed or was refunded. Stripe holds your card details; we never receive them.
- Sellers' product pages. Prices, sizes and availability read from retailers' public listings. This is page content about perfumes, not information about you.
3. How we use it
- To run the Service: your shelves, ratings, comments, trades and messages exist because you made them.
- To track prices for you and send the notifications you've turned on.
- To manage your account, your subscription and its limits.
- To keep the community safe: new comments and photos are screened automatically for abuse, reports are reviewed by a person, and blocks are enforced.
- To answer identify photos and advisor questions.
- To prevent abuse, secure the Service and fix problems.
- To answer support requests, and to meet legal obligations.
We don't use your data for advertising, and we don't profile you for marketing.
4. Who else sees it
We do not sell personal information. It goes to:
- Other members, only what is meant to be seen: comments and ratings carry your display name or handle; a public profile shows your handle, bio, picture, shelves and trade ratings; a trade listing shows the bottle, its photos and your handle. Messages are visible only to the people in them. Your email is never shown.
- Service providers who process data on our instructions under contract: Render (servers and database), Cloudflare (storage for images: the catalog, profile pictures, trade and chat photos), Netlify (this website), Apple (Sign in with Apple, App Store subscriptions, push notifications, App Attest), Stripe (payments made on this website), Resend (the emails we send you), and Anthropic (the AI behind identify, the advisor and the abuse screen for comments and photos — it processes those on our instructions and does not use them to train its models). The services that fetch sellers' pages (Scrapfly, SerpAPI, Brave Search) see product pages, never your data.
- When the law requires it, or to protect the rights, safety and integrity of the Service and its members.
- A successor, if Drexo LLC is merged, acquired or sells the Service — under this policy.
5. Cookies and tracking
This website sets no cookies and runs no analytics or advertising trackers, which is why there is no cookie banner. The Frags app contains no advertising or analytics software either. The only third-party requests the app makes are to the services listed above, to do the things you asked for.
6. How long we keep it
Your data stays for as long as your account exists. When you delete your account (Settings, then Delete account), we ask Apple to revoke your Sign in with Apple grant, and the account row is deleted along with everything attached to it: sessions, push tokens, purchase records, shelves, votes, ratings, classifications, comments and their likes and reports, blocks, tracked perfumes, trade listings, requests, chats and messages. Backups roll off within a short window afterwards. Two things outlive an account on purpose: the shared catalog and its price history (they are not about you), and catalog suggestions you contributed, which are kept without your name so the community doesn't lose them.
Request logs are kept briefly for security. Purchase and refund records from Apple and Stripe are kept as long as tax and accounting rules require. Support emails are kept as long as needed to resolve them.
7. Your choices and rights
- See and change your data in the app: your profile, shelves, ratings, comments and listings are all editable or deletable there.
- Delete your account in the app: Settings, then Delete account. It takes effect immediately.
- Notifications are switchable in Settings and in iOS.
- Blocking a member hides them from you and you from them; the list lives in Settings.
- Ask us for a copy of your data, a correction, or deletion by email at support@fragsapp.com. We answer within the time the law allows.
8. California rights (CCPA/CPRA)
If you live in California you have the right to know what personal information we collect and how we use and share it, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information for anything beyond providing the Service. Exercise these rights by emailing support@fragsapp.com; we will not treat you differently for doing so.
9. Security
All traffic between the app, this website and our servers is encrypted in transit. Passwords are stored only as one-way hashes. The Apple sign-in token we hold for account deletion is encrypted at rest. App Attest keeps automated clients off the Service. Access to production systems is limited to the people who run Frags. No system is perfectly secure, and we can't promise otherwise — if we learn of a breach affecting you, we'll tell you as the law requires.
10. Children
Frags is not for children under 13, and we don't knowingly collect their information. If you believe a child has an account, email us and we will delete it.
11. Changes to this policy
When we change this policy we post the new version here and update the date at the top. If a change materially affects how we handle your data, we'll tell you in the app or by email first.
12. Contact
Drexo LLC · support@fragsapp.com