Privacy Policy

Soaper - Soap Making Calculator & Guide

Effective Date: June 25, 2026 | Last Updated: September 23, 2026

Privacy at a Glance

✓ Your recipes live on your device; cloud sync uses Apple iCloud (iPhone/iPad) or Google Firebase (Android)

✓ We do NOT sell your personal information

✓ We do NOT track you across other apps or websites

✓ We do NOT use third-party analytics or crash-tracking SDKs

✓ Free users may see non-personalized ads; Premium removes them on every platform

✓ We never collect your name, email, or phone unless you contact support

1. Introduction

Burnished Labs, LLC, an Oregon limited liability company ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Soaper mobile application ("App").

Soaper is available on Apple platforms (iPhone, iPad, and Mac via the Apple App Store) and on Android (via Google Play). The two versions share the same features but use different underlying technology for storage and synchronization: the Apple version uses Apple's on-device storage and iCloud/CloudKit, while the Android version uses on-device storage and Google Firebase. Where our data practices differ by platform, this Policy says so explicitly.

Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

This Privacy Policy applies to all users of the App on every platform, including free and premium users.

2. Information We Collect

We are committed to collecting only the minimum amount of information necessary to provide you with a great app experience.

2.1 Information You Provide

Recipes: Names, ingredients, notes, and calculations you create
Inventory: Oil and ingredient inventory data you enter
Shopping Lists: Shopping list items you create
Batch Records: Soaping session data and notes
Photos and Documents: Images and files you choose to attach to recipes, oils, fragrances, colorants, additives, and suppliers, and (with Premium on Android) photos taken during a batch
Settings: Your app preferences and configuration choices
Support Requests: Information you provide when contacting support

2.2 Information Collected Automatically

Device Information: Device type, operating system version, and unique device identifiers. These are used for app functionality and, on both platforms, to prevent repeat activation of the one-time free trial. They are never linked to your advertising identifier or used for advertising.
Account Identifier (Android): The Android app automatically creates an anonymous account with Google Firebase Authentication when you first launch it. This account is identified by a randomly generated identifier and a device identifier that stays the same if you reinstall the app or clear its data, which we use solely to ensure the one-time free trial is not granted repeatedly on the same device. By itself this account is not tied to your name or email. Soaper also offers an optional Google sign-in; if you choose it, your Soaper account is linked to your Google account so your library can follow you to a new device or survive reinstalling the app, and Firebase Authentication then stores your Google account’s email address and display name. If you do not sign in, your account remains anonymous and is identified only by a randomly generated identifier. We do not use your email address for advertising and we do not sell it.
Diagnostic Data (Apple devices): On iPhone/iPad, crash reports and performance metrics (such as app launch time, memory usage, energy consumption, and network responsiveness) are collected via Apple's MetricKit framework. This data is anonymized, not linked to your identity, and not used to track you across apps or websites. Crash diagnostics may be sent to us to help fix problems; they contain no personal information.
Subscription Status: Whether you have an active premium subscription or trial. On Apple devices this comes from Apple. Apple also sends us notices about your purchase (for example a renewal, refund or cancellation), and we keep a record of them linked to a random purchase identifier the App creates, so your Premium access can still be confirmed when your device cannot reach Apple. On Android it is provided by Google Play Billing and stored with your anonymous Firebase account (see Section 7).
Anonymous Usage Counts (both platforms): To learn where new users get stuck, the App sends us a small number of anonymous counts: that it was opened on a given day since first launch, that the recipe list, a recipe, the batch flow, the end-of-trial notice, the upgrade screen or an ad banner was reached, plus the App version, platform, and whether the account was in trial, premium or free at the time. That is the complete list. These counts carry no identifier of any kind — no user ID, device ID, install ID or IP address is stored with them — so they cannot be linked to you, to your account or to your recipes; a reinstall simply counts as a new install. They go only to our own servers, never to a third party, and you can turn them off at any time in Settings → Data Management → “Share anonymous usage counts”, which also deletes anything not yet sent.

We do not use any third-party analytics or crash-reporting SDKs. The Android app does not include Google Analytics for Firebase or Firebase Crashlytics. The only usage information we receive is the anonymous, identifier-free counts described above, sent to our own servers. (Apple and Google may provide us with their own standard, aggregated store-level reporting independent of the App; see their respective privacy policies.)

2.3 Information We Do NOT Collect

We do NOT ask for your name, email address, or phone number. The only exceptions: if you choose the optional Google sign-in on Android, Firebase stores your Google account’s email address and display name (see Section 2.2); and if you contact support, we receive what you send us.
We do NOT collect your precise (GPS) location, and the App never asks for location permission. For free users, Google’s ad service receives your device’s IP address, which can indicate your approximate location, such as your city (see Section 5.3).
We do NOT collect your contacts or address book
We do NOT collect data from other apps on your device
We do NOT track you across websites or other apps
We do NOT create advertising profiles about you

3. How We Use Your Information

We use the information we collect for the following purposes:

a) App Functionality

To provide core app features like recipe calculations and storage
To sync your data across devices — via Apple iCloud on Apple platforms, or via Google Firebase on Android
To store and retrieve photos and documents you attach to your content
To provide system integrations such as Spotlight, Siri, and widgets (Apple), or widgets (Android), where enabled

b) Service Improvement

To identify and fix bugs and technical issues
To develop new features

c) Subscription Management

To verify your subscription or trial status
To provide premium features to subscribers
To process subscription transactions (handled by Apple on Apple devices, or by Google Play on Android)

d) Advertising (Free Users Only)

On iPhone, iPad, and Android, to display non-personalized advertisements to free users
Premium subscribers do not see ads on any platform
We do NOT use your personal data for ad targeting on any platform

e) Legal Compliance

To comply with applicable laws and regulations
To respond to legal requests and prevent fraud

4. Data Storage and Cloud Services

4.1 On Your Device

Your recipes, inventory, shopping lists, batch records, and other app data are stored locally on your device (using Core Data on Apple platforms and a local database on Android). This on-device data is protected by your device's security features (passcode, biometrics) and is retained until you delete it or uninstall the App.

4.2 iCloud Sync (Apple Platforms)

On iPhone, iPad, and Mac, you can sync your data across devices using Apple's iCloud and CloudKit services. This is available to all users, is enabled by default, and can be turned off in Settings if you prefer local-only storage. This sync:

Uses Apple's secure CloudKit infrastructure
Stores data in YOUR iCloud account (not our servers)
Is encrypted in transit and at rest
Can be disabled in your device's iCloud settings

Separately from that sync, if you start the one-time free trial we store a small trial record in your private iCloud database containing a device identifier, the trial start date, and the app version. This applies to anyone who starts a trial (not only Premium subscribers), it stays in your own iCloud account, and it is used solely to prevent the same trial being activated repeatedly. It is never linked to your advertising identifier or used for advertising.

4.3 Cloud Services on Android (Google Firebase)

The Android version of Soaper uses Google Firebase, operated by Google, as its cloud backend. Firebase processes data on our behalf to provide core functionality. Specifically, the following data may be transmitted to and stored in Firebase, associated with your anonymous Firebase account identifier:

Authentication (Firebase Authentication): An anonymous account identifier created automatically on first launch, and a device identifier that persists across reinstalls (used only to enforce the one-time free trial). If you use the optional Google sign-in, Firebase Authentication also stores your Google account’s email address and display name.
Your Soaper content (Cloud Firestore): So your library is available across your devices and survives reinstalling the app, the following are transmitted to and stored in Firebase: your recipes and their ingredients, moulds, batches (including phase progress, timers and notes), inventory items and purchase lots, suppliers, brands, custom ingredients you create, your edits to catalogue items, shopping lists and completed shopping trips, recipe activity history, saved oil blends, and your app preferences.
Trial and subscription state (Cloud Firestore): Your trial start/end dates and current premium entitlement status, so your access is consistent and survives reinstalling the app.
Purchase records (Cloud Firestore): Purchase metadata for in-app purchases — the Google Play purchase token, product identifier, product type, and purchase timestamp — used to verify and restore your entitlement. We do not receive or store your payment card details (see Section 7).
Attachment photos and documents (Cloud Storage for Firebase): Photos and files you attach to recipes, oils, fragrances, colorants, additives, and suppliers are uploaded to Firebase Storage, with their metadata (file name, caption, size, type) stored in Firestore. Note: photos taken during a soap-making batch/session are uploaded only if you have a Premium subscription; batch videos remain on your device and are not uploaded.

All Firebase transmission is encrypted in transit using HTTPS/TLS, and Google encrypts stored data at rest. If you have not signed in, this data is tied to a randomly generated, anonymous identifier rather than your personal identity; if you have signed in with Google, it is tied to that linked account. Firebase's handling of data is also governed by Google's Privacy Policy and Firebase's data-processing terms.

4.4 Data Ownership

You own all the data you create in the App. Your recipes, notes, and content belong to you.

4.5 Data Portability

You can export your recipes as PDF files at any time.

5. Third-Party Services

The App uses the following third-party services, depending on your platform:

5.1 Apple Services (iPhone, iPad, Mac)

App Store: For app distribution and subscription processing
StoreKit: For in-app purchase processing
CloudKit: For iCloud data synchronization on Apple platforms
Spotlight/Siri: For system integration (optional)

5.2 Google Services (Android)

Google Play: For app distribution and subscription/in-app purchase processing
Firebase Authentication: For the anonymous account that enables cloud features, and for the optional Google sign-in
Cloud Firestore: For syncing your Soaper library, app preferences, trial/subscription state, and attachment metadata across your devices
Cloud Storage for Firebase: For storing photos and documents you attach to your content

5.3 Google AdMob (Free Users — All Platforms)

Platform: iPhone, iPad, and Android — free users only
Purpose: To display advertisements to free users
Data Collected by Google: To show ads, measure them and prevent fraud, Google’s ad software collects your device’s IP address (which can be used to estimate your approximate location), your interactions with the ads and the App (such as app launches and ad taps), diagnostic information about how the App and the ads perform, and device identifiers (on Android, the advertising ID and app set ID). This data goes to Google, not to us.
Configuration: Non-personalized ads only; on Android, a consent prompt is shown to users in the EEA/UK before any ad is loaded
Note: Premium subscribers do not see ads on any platform

5.4 Analytics

We do NOT use third-party analytics or crash-reporting SDKs that identify individual users
The Android app does not include Firebase Analytics or Crashlytics
On Apple devices, anonymized diagnostics are collected via Apple's MetricKit (see Section 2.2)
Both apps send us anonymous, identifier-free usage counts so we can see where new users get stuck (see Section 2.2). They cannot be linked to you, and you can turn them off in Settings → Data Management

Each third-party service has its own privacy policy:

Apple: https://www.apple.com/legal/privacy/
Google (incl. Firebase & AdMob): https://policies.google.com/privacy
Firebase data handling: https://firebase.google.com/support/privacy

6. Advertising

6.1 Free Users

If you use the free version of Soaper on iPhone, iPad, or Android, you may see advertisements provided by Google AdMob. These ads are:

Non-personalized: We do not use your personal data to target ads
Context-based: Ads may be related to the general category of the App
Limited tracking: We do not enable cross-app tracking
Consent-driven (EEA/UK): On Android, if you are located in the European Economic Area or the United Kingdom, you will be shown a consent form before any ad is loaded; you can change your choice later from the app

6.2 Premium Users

Premium subscribers do not see any advertisements on any platform.

6.3 App Tracking Transparency

We do NOT request permission to track you across other apps and websites. We have chosen not to participate in cross-app tracking.

6.4 Opting Out

You can remove all ads by subscribing to Soaper Premium, on any platform.

7. Subscription Data

7.1 What We Store

Subscription status (active/inactive)
Subscription type (monthly/annual/lifetime)
Trial eligibility and trial start/end dates
On Android, purchase metadata (Google Play purchase token, product identifier, timestamp) used to verify and restore your entitlement
On Apple devices, the purchase records Apple sends us (transaction identifiers, product, purchase and expiry dates, and renewal and refund status), linked to a random purchase identifier the App creates. This identifier is not your Apple ID. It appears in Settings as your Support ID.

7.2 What We Do NOT Store

Payment information (handled entirely by Apple or Google)
Credit card numbers
Billing address
Apple ID or Google account credentials

7.3 How It's Processed

All subscription transactions are processed by Apple (on Apple devices) or by Google Play (on Android). We receive only confirmation of your subscription status and the purchase metadata described above — never your payment details.

7.4 Refunds

Refund requests are handled by Apple or Google Play, depending on where you purchased. We do not process refunds directly.

8. Children's Privacy

The App is not intended for use by children under 13 years of age (or 16 in the European Union).

We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@soaperapp.com.

IMPORTANT: Soap making involves dangerous chemicals and should only be performed by adults or under adult supervision with proper safety training.

9. Your Privacy Rights

You have the following rights regarding your data:

Access: You can view all your data within the App at any time.
Export: You can export your recipes as PDF files.
Deletion: You can delete any recipe, inventory item, saved blend, attachment, or other content at any time. Deleting content removes it from your device and, where applicable, from the cloud (iCloud on Apple platforms, or Firebase on Android). See Section 9.1 for full data and account deletion.
Opt-Out: You can disable optional system integrations (e.g., Spotlight, Siri) in your device settings.
Advertising: You can remove ads on any platform — iPhone, iPad, and Android — by subscribing to Premium.
Sync: On Apple platforms, you can disable iCloud sync in your device's Settings. On Android, you can turn Cloud Sync off in the app's Settings; anything already synced stays in the cloud until you delete it as described in Section 9.1.

To exercise any of these rights, use the features within the App or contact us at support@soaperapp.com.

9.1 Data Deletion and Account Deletion

You can delete your data in the following ways:

Delete individual content in the App: Deleting a recipe, saved blend, attachment, or other item removes it from your device and from any associated cloud copy (iCloud on Apple platforms; Firebase on Android).
Uninstall the App: Uninstalling removes all data stored locally on that device.
Delete your cloud data from inside the App (Android): Settings → Data Management → Delete My Data removes your content from this device and deletes the copy stored in the cloud. Standard oils and other catalogue items, and your app settings, are kept. You can also still email support@soaperapp.com with the subject line "Data Deletion Request" if you would rather we did it for you. We may ask for information needed to locate the correct account.
iCloud (Apple platforms): Data synced to iCloud can be deleted through your device's iCloud settings.
Anonymous usage counts and diagnostics: Because these carry no identifier, we have no way to find yours to delete them; they expire on their own (see Section 14). Turning usage counts off in Settings stops any further ones and deletes those not yet sent.

We will action verified deletion requests within 30 days. Note that records we are required to retain for legal, tax, or fraud-prevention purposes (for example, certain purchase records) may be retained as required by law.

10. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data (see Section 9.1).
Right to Restrict Processing: Request limitation of data processing.
Right to Data Portability: Request transfer of your data.
Right to Object: Object to certain types of processing.
Right to Withdraw Consent: Withdraw consent at any time.

Data Processors: Where we use cloud infrastructure to provide the App, those providers act as our data processors: Apple (iCloud/CloudKit) on Apple platforms, and Google (Firebase) on Android. Payment processing is handled by Apple or Google Play as applicable.

Legal Basis for Processing:

Contract: To provide the App's services
Legitimate Interest: To improve the App and prevent fraud
Consent: For optional features

To exercise your GDPR rights, contact us at support@soaperapp.com.

11. CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know: What personal information we collect and how we use it.
Right to Delete: Request deletion of your personal information (see Section 9.1).
Right to Opt-Out: Opt out of the sale of personal information. Note: We do NOT sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Categories of Information Collected:

Device and account identifiers (including the anonymous Firebase identifier on Android)
User-generated content (recipes, notes, saved blends, attachments)
Purchase and subscription metadata

We do NOT sell personal information to third parties.

To exercise your CCPA rights, contact us at support@soaperapp.com.

12. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information.

We may share information only in the following circumstances:

Service Providers (Processors): With third-party providers who process data on our behalf to operate the App — Apple (iCloud sync, payments) on Apple platforms; Google (Firebase cloud services, Google Play payments) on Android; and Google AdMob (advertising to free users on iPhone, iPad, and Android). These providers are bound by their own data-processing and confidentiality obligations.
Legal Requirements: If required by law, court order, or governmental authority.
Safety: To protect the rights, property, or safety of the Company, our users, or others.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
With Your Consent: In any other situation with your explicit consent.

13. Data Security

We implement appropriate technical and organizational measures to protect your information:

Local Storage: Data stored on your device is protected by your device's security features (passcode, biometrics).
Encryption in Transit: All synchronization with cloud services (Apple iCloud or Google Firebase) is encrypted in transit using TLS/HTTPS.
Encryption at Rest: Cloud data is encrypted at rest by the respective provider (Apple for iCloud/CloudKit; Google for Firebase).
Anonymous by Default (Android): Unless you choose the optional Google sign-in, cloud records on Android are associated with a randomly generated anonymous identifier rather than your personal identity.
Payment Security: Subscription and payment processing is handled securely by Apple's StoreKit or Google Play Billing. We never receive your payment card details.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

14. Data Retention

App Data: Your recipes and app data are retained until you delete them or uninstall the App.
Cloud Data: Data synced to iCloud (Apple) or Firebase (Android) remains until you delete the underlying content, or delete your data as described in Section 9.1. On Apple platforms you can also turn iCloud sync off in your device settings; on Android you can turn Cloud Sync off in the app's Settings.
Purchase Records: Purchase and subscription metadata may be retained as needed to verify entitlements and as required for legal, tax, or fraud-prevention purposes.
Anonymous Usage Counts: Kept for 365 days on our servers, then deleted automatically.
Crash Diagnostics (Apple devices): Uploaded crash diagnostics are kept for 180 days on our servers, then deleted automatically; the on-device copies are kept for 30 days.
Support Requests: Support correspondence is retained for up to 3 years for quality assurance.
Account Deletion: See Section 9.1 for how to delete your content and request full deletion of cloud-stored data.

15. International Data Transfers

Your data is stored locally on your device and, where you use cloud features, in Apple iCloud (Apple platforms) or Google Firebase (Android).

Apple's and Google's infrastructure may store and process data in various locations globally. Both maintain appropriate safeguards for international data transfers.

If you are located outside the United States and choose to use the App, you understand that your information may be transferred to and processed in the United States and other countries where our service providers operate.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when posted within the App or on this page.

We will notify you of material changes by:

Updating the "Last Updated" date
Displaying a notice within the App, where appropriate

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

For questions about this Privacy Policy or your data, please contact us:

Email: support@soaperapp.com
Website: https://soaperapp.com

For data deletion requests:
Email: support@soaperapp.com
Subject Line: "Data Deletion Request" (see Section 9.1)

For GDPR-related inquiries:
Data Protection Contact: support@soaperapp.com
Subject Line: "GDPR Request"

For CCPA-related inquiries:
Subject Line: "CCPA Request"

We will respond to your request within 30 days.