Privacy Statement for Aroma360 Products and Services

Policy active as of September 22, 2025

At Aroma360, we take your privacy seriously.

This Privacy Statement for Aroma360 Products and Services (“Privacy Statement”) describes information that Aroma360 and its subsidiaries and affiliates (collectively, “Aroma360”) collect, use, share, and store, including personal information (i.e., information that personally identifies you, such as your name, email address or billing information, or other data that can be reasonably used to infer this information).

This document focuses on information related to the operation of Aroma360 products and services (collectively, “Aroma360 Products”). In this Privacy Statement, the expression “Aroma360 Products” also includes our Web Apps and Mobile Apps.

We provide additional details about how we collect and use information from our public web sites in our Privacy Policy for Aroma360 Web Sites.

Our Promise

  1. We will be transparent about the different types of information we collect and how we use them.
  2. We will share your information with third parties only when we think they will provide you with a welcome additional service.
  3. We will use best-in-class data security tools to keep your data safe and protect the Aroma360 Products from unauthorized access.

Your Permission

Permission for data collection and processing. By using Aroma360 Products, you agree to allow us to collect and process information as described in this Privacy Statement.

International data transfers. Your personal information may be collected, processed and stored by Aroma360 or its service providers in the United States and other countries where our servers reside. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country.

If you are using Aroma360 Products in the European Economic Area or other regions with laws governing data collection and use that may differ from United States law, you agree to the transfer of your personal data to the United States and other countries where Aroma360 operates. We have provided you with more information below as to how we protect your personal data when it is transferred internationally.

What information does Aroma360 collect?

Aroma360 collects:

Setup information you provide

When you install the Aroma360 diffuser, you’ll be asked several questions in order to help us create an initial program of scenting settings. This information helps us to customize your experience.

Environmental data from the Aroma360’s sensors

We collect data from several sensors built into the Aroma360 diffuser. This helps your Aroma360 keep you comfortable when you are at home and save energy when you are away.

Direct adjustments to the device

If you change settings like strength on the Aroma360 diffuser, it records and feeds that information to the Aroma360 algorithms to learn your desired comfort level in different situations.

Heating and cooling usage information

Every time your system turns on and off, Aroma360 records the time and duration during which your system was on in order to offer you features such as usage history.

Technical information from the device

In order to improve your experience over time and help troubleshoot any problem you may encounter with the Aroma360, we record your Aroma360 model and serial number, software version, and technical information such as battery charge level.

What additional information does Aroma360 collect and store when a user connects a Aroma360 Product to the Internet or creates an account?

Wi-Fi Network Information

To connect your Aroma360 Product to our Services, or to access your Aroma360 Product over the Internet from a smartphone or a tablet, you will need to connect it to your Wi-Fi network. During setup, the Aroma360 Product will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device, along with your IP address, so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with Aroma360 servers and download software updates.

Once connected to your Wi-Fi network, your Aroma360 Product regularly sends the data described in this Privacy Statement (excluding your Wi-Fi password) to Aroma360 to provide you with the Services.

Additional Authorized Users

Aroma360 may provide you with the ability to enable additional authorized users to access your account. If you do so, the additional authorized users may control and view all of your devices and content with Aroma360 connections. Invited users may also add additional authorized users to your account, so be careful to add only those you trust. An invited user must have or create a Aroma360 account, and information about invited users (like email address, name or changes to product settings) will be stored with your account.

Email Addresses

When you create a Aroma360 account, we collect and store your email address. From that point forward, your email address is used for communications from Aroma360. In addition, Aroma360 may provide you with the ability to enable individuals to access your account as additional authorized users, or to invite other individuals such as friends or family to share access to your device(s). We will ask you for the email address of any such individuals and automatically send an email invitation on your behalf. Aroma360 stores this information to send this email, to register your friend if your invitation is accepted, and to track the success of our invitation services.

Basic Profile Information

Your account allows you to provide certain basic profile information like your name and profile photo. Names and profile photos may be shown to others in connection with the Services. In addition, if you download the Aroma360 Mobile App, we may collect and store your mobile device identifiers (such as IDFA, AAID, or other device identifiers). For example, if you invite someone as an additional authorized user, he or she will be able to see your name and photo.

Mobile location data

You may choose to enable features that allow you to control the device from far away from the device or device pairing. If you do this, you’ll be asked for permission to share location data from your mobile device. If you grant this permission, the Aroma360 app uses standard location services built into iOS and Android. This data may be processed or combined with data from other products to enhance features.

Bluetooth data

Bluetooth-enabled Aroma360 Products may broadcast an identifying signal wirelessly. This is used to connect with your Bluetooth-enabled devices (such as a smartphone or tablet) in order to deliver more options.

Remember that when you visit our Sites, we collect personal information as described in our separate Privacy Policy for Aroma360 Web Sites. Like most Internet sites, we routinely record log entries (including information such as your IP address) and technical information (such as your browser type and version) when your browser, mobile device or Aroma360 Product contacts our servers.

How does Aroma360 use the information it collects?

We use this information to provide, develop and improve Aroma360 Products and services, including to make assessments and recommendations about products, safety, or energy use. We may use your contact details to send you this information, or to ask you to participate in surveys about your Aroma360 use, and to send you other communications from Aroma360.

We may also use this information in a non-identified form for research purposes and to help us make sales, marketing, and business decisions. For example, we use aggregated user information about the number of active diffuser users in a particular state to help us decide what services to offer.

We may use service providers to perform some of these functions. Those service providers are restricted from sharing your information for any other purpose.

We use industry-standard methods to keep this information safe and secure while it is transmitted over your home network and through the Internet to our servers. Depending on your location and type of data, Aroma360 may process your personal information on servers that are not in your home country.

In general for purposes of applicable law (e.g., GDPR), Aroma360 is a controller of the information collected in connection with the Products and Services.

Our legal bases for processing information

If European data protection law applies to the processing of your information, we process your information for the purposes described in this Privacy Statement, based on the following legal grounds:

When we’re providing a product or service

We process your data to provide and support a product or service you’ve asked for under a contract, including but not limited to delivering our Terms of Service.

When we’re pursuing legitimate interests

We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means we process your information for things like:

When we’re complying with legal obligations

We process your data when we have a legal obligation to do so, for example, if we’re responding to a legal process or an enforceable governmental request.

With your consent

We ask for your consent to process your information for certain specific purposes and give you the right to withdraw that consent at any time.

In what circumstances does Aroma360 share my information?

We use your information for commercial and marketing purposes and only share it with third parties that are committed to protecting that information with appropriate safeguards. We do not rent or sell our customer lists.

The following are the limited situations where we may share personal information:

We may share non-personal information (for example, aggregated or anonymized customer data) publicly and with our partners. For example, we may publish trends about diffuser use. This information may also be shared with other users to help them better understand their usage compared to others in the Aroma360 community, raise awareness about safety issues, or help us generally improve our system. We may also share non-personal information with our partners, for example, if they are interested in providing demand-response services or other incentive programs. We take steps to keep this non-personal information from being associated with you and we require our partners to do the same.

If you select an outside party for the purchase, installation or service of your Aroma360 device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. Always check the privacy policies for any company that collects your personal information.

What choices do I have and how can I delete my personal information?

Aroma360 generally stores your personal information on Aroma360’s servers until you delete or edit it, or for as long as you remain a Aroma360 customer in order to provide you with Aroma360 Products. In addition, Aroma360 may store your personal information to resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements and comply with applicable laws.

You can access, amend or delete your personal information from Aroma360’s servers by sending an email to [email protected].

Individual Rights in the European Economic Area

If you are located in the European Economic Area, you may seek confirmation regarding whether Aroma360 is processing personal information about you, request access to your personal information and ask that we correct, amend or delete your personal information. In addition, you may object to Aroma360’s processing of your personal information at any time. However doing so may impact your use of the Products and Services.

How does Aroma360 protect my personal information when it is transferred internationally?

When we transfer personal data from the European Economic Area (“EEA”) Switzerland or the United Kingdom (“UK”) to other countries, including to the United States, we use a variety of legal mechanisms to help ensure your data is appropriately protected.

Aroma360 complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss–U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively, the “Data Privacy Framework” or “DPF”).

As part of our participation in the DPF, if you have an inquiry or complaint regarding our privacy practices in relation to our DPF certification, we encourage you to contact us at [email protected].

Minors

Only individuals aged 18 and older are permitted to act as Owners of Aroma360 Accounts. Authorized Users must be over the age of 13 and may use the Products and Services under the supervision of a parent or legal guardian and only if they agree to be bound by these Terms on your behalf. Aroma360 Products and Services do not knowingly collect or store any personal information from anyone under the age of 13.

California requirements

If the California Consumer Privacy Act (CCPA) applies to your information, we provide these disclosures and the tools described in this policy so you can exercise your rights to receive information about our data practices, as well as to request access to and deletion of your information.

Aroma360 does not sell your personal information. We share your information as described in this policy.

Can the Privacy Statement be changed?

Please note that this Privacy Statement may change from time to time. We will provide notice of any changes on the website or by contacting you.

How can I contact Aroma360?

United States & Rest of World

2058 NW Miami Ct., Miami, FL 33127 USA
Phone: +1-786-396-6191

European Economic Area

Anne Van Der Hagen
The DPO Centre Europe Ltd
Alexandra House, 3 Ballsbridge Park, Dublin, D04C 7H2
Phone: +353 1 631 9460

United Kingdom

Katie Handshaw
The DPO Centre Ltd
50 Liverpool Street, London, EC2M 7PY, UK
Phone: +44 (0) 203 797 6340

For all data protection inquiries, email our Data Protection Office: [email protected]