Privacy Policy

Soaper - Soap Making Calculator & Guide

Effective Date: June 25, 2026 | Last Updated: June 25, 2026

Privacy at a Glance

✓ Your recipes live on your device; cloud sync uses Apple iCloud (iPhone/iPad) or Google Firebase (Android)
✓ We do NOT sell your personal information
✓ We do NOT track you across other apps or websites
✓ We do NOT use third-party analytics or crash-tracking SDKs
✓ Free users may see non-personalized ads; Premium removes them on every platform
✓ We never collect your name, email, or phone unless you contact support

1. Introduction

Burnished Labs, LLC, an Oregon limited liability company, doing business as Soaper App ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Soaper mobile application ("App").

Soaper is available on Apple platforms (iPhone, iPad, and Mac via the Apple App Store) and on Android (via Google Play). The two versions share the same features but use different underlying technology for storage and synchronization: the Apple version uses Apple's on-device storage and iCloud/CloudKit, while the Android version uses on-device storage and Google Firebase. Where our data practices differ by platform, this Policy says so explicitly.

Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

This Privacy Policy applies to all users of the App on every platform, including free and premium users.

2. Information We Collect

We are committed to collecting only the minimum amount of information necessary to provide you with a great app experience.

2.1 Information You Provide

  • Recipes: Names, ingredients, notes, and calculations you create
  • Inventory: Oil and ingredient inventory data you enter
  • Shopping Lists: Shopping list items you create
  • Batch Records: Soaping session data and notes
  • Photos and Documents: Images and files you choose to attach to recipes, oils, fragrances, colorants, additives, and suppliers
  • Settings: Your app preferences and configuration choices
  • Support Requests: Information you provide when contacting support

2.2 Information Collected Automatically

  • Device Information: Device type, operating system version, and unique device identifiers. These are used for app functionality and, on both platforms, to prevent repeat activation of the one-time free trial. They are never linked to your advertising identifier or used for advertising.
  • Account Identifier (Android): The Android app automatically creates an anonymous account with Google Firebase Authentication when you first launch it. This account is identified by a randomly generated identifier and a device identifier that stays the same if you reinstall the app or clear its data, which we use solely to ensure the one-time free trial is not granted repeatedly on the same device. It is not tied to your name, email, or Google account unless a future version offers, and you choose, an optional sign-in.
  • Diagnostic Data (Apple devices): On iPhone/iPad, crash reports and performance metrics (such as app launch time, memory usage, energy consumption, and network responsiveness) are collected via Apple's MetricKit framework. This data is anonymized, not linked to your identity, and not used to track you across apps or websites.
  • Subscription Status: Whether you have an active premium subscription or trial. On Apple devices this is provided by Apple; on Android it is provided by Google Play Billing and stored with your anonymous Firebase account (see Section 7).

We do not use any third-party analytics or crash-reporting SDKs. The Android app does not include Google Analytics for Firebase or Firebase Crashlytics. (Apple and Google may provide us with their own standard, aggregated store-level reporting independent of the App; see their respective privacy policies.)

2.3 Information We Do NOT Collect

  • We do NOT collect your name, email address, or phone number (unless you contact support)
  • We do NOT collect your location
  • We do NOT collect your contacts or address book
  • We do NOT collect data from other apps on your device
  • We do NOT track you across websites or other apps
  • We do NOT create advertising profiles about you

3. How We Use Your Information

We use the information we collect for the following purposes:

a) App Functionality

  • To provide core app features like recipe calculations and storage
  • To sync your data across devices — via Apple iCloud on Apple platforms, or via Google Firebase on Android
  • To store and retrieve photos and documents you attach to your content
  • To provide system integrations such as Spotlight, Siri, and widgets (Apple), or widgets (Android), where enabled

b) Service Improvement

  • To identify and fix bugs and technical issues
  • To develop new features

c) Subscription Management

  • To verify your subscription or trial status
  • To provide premium features to subscribers
  • To process subscription transactions (handled by Apple on Apple devices, or by Google Play on Android)

d) Advertising (Apple Free Users Only)

  • On iPhone/iPad only, to display non-personalized advertisements to free users
  • The Android app does not display ads
  • We do NOT use your personal data for ad targeting on any platform

e) Legal Compliance

  • To comply with applicable laws and regulations
  • To respond to legal requests and prevent fraud

4. Data Storage and Cloud Services

4.1 On Your Device

Your recipes, inventory, shopping lists, batch records, and other app data are stored locally on your device (using Core Data on Apple platforms and a local database on Android). This on-device data is protected by your device's security features (passcode, biometrics) and is retained until you delete it or uninstall the App.

4.2 iCloud Sync (Apple Platforms)

On iPhone, iPad, and Mac, Premium subscribers can sync their data across devices using Apple's iCloud and CloudKit services. This sync:

  • Uses Apple's secure CloudKit infrastructure
  • Stores data in YOUR iCloud account (not our servers)
  • Is encrypted in transit and at rest
  • Can be disabled in your device's iCloud settings

Separately from that Premium sync, if you start the one-time free trial we store a small trial record in your private iCloud database containing a device identifier, the trial start date, and the app version. This applies to anyone who starts a trial (not only Premium subscribers), it stays in your own iCloud account, and it is used solely to prevent the same trial being activated repeatedly. It is never linked to your advertising identifier or used for advertising.

4.3 Cloud Services on Android (Google Firebase)

The Android version of Soaper uses Google Firebase, operated by Google, as its cloud backend. Firebase processes data on our behalf to provide core functionality. Specifically, the following data may be transmitted to and stored in Firebase, associated with your anonymous Firebase account identifier:

  • Authentication (Firebase Authentication): An anonymous account identifier created automatically on first launch, and a device identifier that persists across reinstalls (used only to enforce the one-time free trial).
  • Trial and subscription state (Cloud Firestore): Your trial start/end dates and current premium entitlement status, so your access is consistent and survives reinstalling the app.
  • Purchase records (Cloud Firestore): Purchase metadata for in-app purchases — the Google Play purchase token, product identifier, product type, and purchase timestamp — used to verify and restore your entitlement. We do not receive or store your payment card details (see Section 7).
  • Saved blends (Cloud Firestore): If you save oil blends, the blend's name, oils, and settings are synced so they are available across your devices.
  • Attachment photos and documents (Cloud Storage for Firebase): Photos and files you attach to recipes, oils, fragrances, colorants, additives, and suppliers are uploaded to Firebase Storage, with their metadata (file name, caption, size, type) stored in Firestore. Note: photos taken or attached specifically to a soap-making batch/session remain on your device only and are not uploaded.

All Firebase transmission is encrypted in transit using HTTPS/TLS, and Google encrypts stored data at rest. This data is tied to a randomly generated, anonymous identifier rather than your personal identity. Firebase's handling of data is also governed by Google's Privacy Policy and Firebase's data-processing terms.

4.4 Data Ownership

You own all the data you create in the App. Your recipes, notes, and content belong to you.

4.5 Data Portability

You can export your recipes as PDF files at any time.

5. Third-Party Services

The App uses the following third-party services, depending on your platform:

5.1 Apple Services (iPhone, iPad, Mac)

  • App Store: For app distribution and subscription processing
  • StoreKit: For in-app purchase processing
  • CloudKit: For iCloud data synchronization (Premium feature)
  • Spotlight/Siri: For system integration (optional)

5.2 Google Services (Android)

  • Google Play: For app distribution and subscription/in-app purchase processing
  • Firebase Authentication: For the anonymous account that enables cloud features
  • Cloud Firestore: For syncing trial/subscription state, saved blends, and attachment metadata
  • Cloud Storage for Firebase: For storing photos and documents you attach to your content

5.3 Google AdMob (Free Users — All Platforms)

  • Platform: iPhone, iPad, and Android — free users only
  • Purpose: To display advertisements to free users
  • Data Collected: Advertising identifier / device identifiers for ad serving
  • Configuration: Non-personalized ads only; on Android, a consent prompt is shown to users in the EEA/UK before any ad is loaded
  • Note: Premium subscribers do not see ads on any platform

5.4 Analytics

  • We do NOT use third-party analytics or crash-reporting SDKs that identify individual users
  • The Android app does not include Firebase Analytics or Crashlytics
  • On Apple devices, anonymized diagnostics are collected via Apple's MetricKit (see Section 2.2)

Each third-party service has its own privacy policy:

6. Advertising

6.1 Free Users

If you use the free version of Soaper on iPhone, iPad, or Android, you may see advertisements provided by Google AdMob. These ads are:

  • Non-personalized: We do not use your personal data to target ads
  • Context-based: Ads may be related to the general category of the App
  • Limited tracking: We do not enable cross-app tracking
  • Consent-driven (EEA/UK): On Android, if you are located in the European Economic Area or the United Kingdom, you will be shown a consent form before any ad is loaded; you can change your choice later from the app

6.2 Premium Users

Premium subscribers do not see any advertisements on any platform.

6.3 App Tracking Transparency

We do NOT request permission to track you across other apps and websites. We have chosen not to participate in cross-app tracking.

6.4 Opting Out

You can remove all ads by subscribing to Soaper Premium, on any platform.

7. Subscription Data

7.1 What We Store

  • Subscription status (active/inactive)
  • Subscription type (monthly/annual/lifetime)
  • Trial eligibility and trial start/end dates
  • On Android, purchase metadata (Google Play purchase token, product identifier, timestamp) used to verify and restore your entitlement

7.2 What We Do NOT Store

  • Payment information (handled entirely by Apple or Google)
  • Credit card numbers
  • Billing address
  • Apple ID or Google account credentials

7.3 How It's Processed

All subscription transactions are processed by Apple (on Apple devices) or by Google Play (on Android). We receive only confirmation of your subscription status and the purchase metadata described above — never your payment details.

7.4 Refunds

Refund requests are handled by Apple or Google Play, depending on where you purchased. We do not process refunds directly.

8. Children's Privacy

The App is not intended for use by children under 13 years of age (or 16 in the European Union).

We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@soaperapp.com.

IMPORTANT: Soap making involves dangerous chemicals and should only be performed by adults or under adult supervision with proper safety training.

9. Your Privacy Rights

You have the following rights regarding your data:

  • Access: You can view all your data within the App at any time.
  • Export: You can export your recipes as PDF files.
  • Deletion: You can delete any recipe, inventory item, saved blend, attachment, or other content at any time. Deleting content removes it from your device and, where applicable, from the cloud (iCloud on Apple platforms, or Firebase on Android). See Section 9.1 for full data and account deletion.
  • Opt-Out: You can disable optional system integrations (e.g., Spotlight, Siri) in your device settings.
  • Advertising: On Apple devices, you can remove ads by subscribing to Premium. The Android app has no ads.
  • Sync: On Apple platforms, you can disable iCloud sync in your device's Settings.

To exercise any of these rights, use the features within the App or contact us at support@soaperapp.com.

9.1 Data Deletion and Account Deletion

You can delete your data in the following ways:

  • Delete individual content in the App: Deleting a recipe, saved blend, attachment, or other item removes it from your device and from any associated cloud copy (iCloud on Apple platforms; Firebase on Android).
  • Uninstall the App: Uninstalling removes all data stored locally on that device.
  • Request full deletion of cloud-stored data (Android): Because the Android app uses an anonymous Firebase account, you can request deletion of all cloud data associated with your account — including trial/subscription records, saved blends, and attachment files — by emailing support@soaperapp.com with the subject line "Data Deletion Request." We will delete the associated cloud records. We may ask for information needed to locate the correct anonymous account.
  • iCloud (Apple platforms): Data synced to iCloud can be deleted through your device's iCloud settings.

We will action verified deletion requests within 30 days. Note that records we are required to retain for legal, tax, or fraud-prevention purposes (for example, certain purchase records) may be retained as required by law.

10. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data (see Section 9.1).
  • Right to Restrict Processing: Request limitation of data processing.
  • Right to Data Portability: Request transfer of your data.
  • Right to Object: Object to certain types of processing.
  • Right to Withdraw Consent: Withdraw consent at any time.

Data Processors: Where we use cloud infrastructure to provide the App, those providers act as our data processors: Apple (iCloud/CloudKit) on Apple platforms, and Google (Firebase) on Android. Payment processing is handled by Apple or Google Play as applicable.

Legal Basis for Processing:

  • Contract: To provide the App's services
  • Legitimate Interest: To improve the App and prevent fraud
  • Consent: For optional features

To exercise your GDPR rights, contact us at support@soaperapp.com.

11. CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: What personal information we collect and how we use it.
  • Right to Delete: Request deletion of your personal information (see Section 9.1).
  • Right to Opt-Out: Opt out of the sale of personal information. Note: We do NOT sell your personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Categories of Information Collected:

  • Device and account identifiers (including the anonymous Firebase identifier on Android)
  • User-generated content (recipes, notes, saved blends, attachments)
  • Purchase and subscription metadata

We do NOT sell personal information to third parties.

To exercise your CCPA rights, contact us at support@soaperapp.com.

12. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information.

We may share information only in the following circumstances:

  • Service Providers (Processors): With third-party providers who process data on our behalf to operate the App — Apple (iCloud sync, payments) on Apple platforms; Google (Firebase cloud services, Google Play payments) on Android; and Google AdMob (advertising to free users on iPhone, iPad, and Android). These providers are bound by their own data-processing and confidentiality obligations.
  • Legal Requirements: If required by law, court order, or governmental authority.
  • Safety: To protect the rights, property, or safety of the Company, our users, or others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
  • With Your Consent: In any other situation with your explicit consent.

13. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Local Storage: Data stored on your device is protected by your device's security features (passcode, biometrics).
  • Encryption in Transit: All synchronization with cloud services (Apple iCloud or Google Firebase) is encrypted in transit using TLS/HTTPS.
  • Encryption at Rest: Cloud data is encrypted at rest by the respective provider (Apple for iCloud/CloudKit; Google for Firebase).
  • Anonymous by Design (Android): Cloud records on Android are associated with a randomly generated anonymous identifier rather than your personal identity.
  • Payment Security: Subscription and payment processing is handled securely by Apple's StoreKit or Google Play Billing. We never receive your payment card details.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

14. Data Retention

  • App Data: Your recipes and app data are retained until you delete them or uninstall the App.
  • Cloud Data: Data synced to iCloud (Apple) or Firebase (Android) remains until you delete the underlying content, request account deletion (Section 9.1), or disable sync where available.
  • Purchase Records: Purchase and subscription metadata may be retained as needed to verify entitlements and as required for legal, tax, or fraud-prevention purposes.
  • Support Requests: Support correspondence is retained for up to 3 years for quality assurance.
  • Account Deletion: See Section 9.1 for how to delete your content and request full deletion of cloud-stored data.

15. International Data Transfers

Your data is stored locally on your device and, where you use cloud features, in Apple iCloud (Apple platforms) or Google Firebase (Android).

Apple's and Google's infrastructure may store and process data in various locations globally. Both maintain appropriate safeguards for international data transfers.

If you are located outside the United States and choose to use the App, you understand that your information may be transferred to and processed in the United States and other countries where our service providers operate.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when posted within the App or on this page.

We will notify you of material changes by:

  • Updating the "Last Updated" date
  • Displaying a notice within the App, where appropriate

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

For questions about this Privacy Policy or your data, please contact us:

For data deletion requests:
Email: support@soaperapp.com
Subject Line: "Data Deletion Request" (see Section 9.1)

For GDPR-related inquiries:
Data Protection Contact: support@soaperapp.com
Subject Line: "GDPR Request"

For CCPA-related inquiries:
Subject Line: "CCPA Request"

We will respond to your request within 30 days.

This Privacy Policy was last updated on June 25, 2026.
© 2025–2026 Burnished Labs, LLC. All rights reserved.