Privacy Policy
Last Updated: August 20, 2026
1. Introduction
At Lab of Elixirs, we respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information when you use our mobile application and web portal, ensuring transparency in our "alchemy" of data processing.
2. Information Collection & Permissions
We collect information that you provide directly to us, as well as data automatically collected via device permissions:
- ●Account Data: Identity details from Firebase Authentication (Email, UID).
- ●Content: Recipes, formulations, and discussion posts you create.
- ●Camera Access: Used only when you choose to take photos of your elixirs or ingredients directly within the app.
- ●Photo Library: Used to upload existing images to your profile, recipes, or discussions.
- ●Advertising & Conversion Data: When you arrive via a TikTok or Meta (Facebook/Instagram) ad, we collect conversion events including app installs, subscription purchases, and in-app shop purchases to measure ad performance.
3. Processing Purposes
Service Optimization
We use your device information and interaction data to synchronize preferences, manage block lists, and ensure your formulations are accessible across all authenticated devices.
Community Integrity
User-generated content is monitored to prevent spam, harassment, and unauthorized distribution of sensitive materials, maintaining a safe environment for all users.
4. Data Retention
We retain your personal information for as long as your account is active. If you choose to delete your account, your personal profile data and private recipes will be permanently removed from our Firebase production databases within 30 days. Public discussions and community-shared recipes may be anonymized rather than deleted to maintain thread continuity.
5. Security Measures
Your data is secured using industry-standard protocols:
- End-to-end encryption for data in transit (SSL/TLS).
- Server-side validation via Firebase Security Rules.
- Administrative access restricted via Custom Auth Claims.
6. Third-Party Advertising & Analytics SDKs
We integrate the following third-party SDKs solely to measure the effectiveness of our advertising campaigns. These SDKs may collect device identifiers and conversion event data as described below.
TikTok for Business SDK
We use the TikTok Events API / SDK to report conversion events when a user installs the app, purchases a subscription, or completes an in-app shop purchase after clicking a TikTok ad. TikTok may use this data in accordance with its own Privacy Policy.
Events tracked: Install · Subscribe · Purchase
Meta (Facebook) SDK
We use the Meta Pixel / Facebook SDK to report conversion events when a user installs the app, purchases a subscription, or completes an in-app shop purchase after clicking a Facebook or Instagram ad. Meta may use this data in accordance with its own Privacy Policy.
Events tracked: Install · Subscribe · Purchase
No event data is shared with these platforms unless your session originated from one of their ads. You may opt out of interest-based advertising through your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads) or by contacting us at the address below.
7. Your Rights & Contact Information
Under GDPR and CCPA, you have the right to access, port, or erase your data. For any privacy-related inquiries, data export requests, or to report a security vulnerability, please contact our Data Protection Officer.