Privacy Policy

Who is responsible for your data

Celina is operated from Norway and the data controller is the owner of Celina, contactable at privacy@mycelina.com. Because we are established in the EEA, the GDPR applies to everything described below, wherever you live.

What we collect

• Account details — email address, username, display name, and anything you choose to add such as a bio, avatar, country and preferred currency.
• Content you create — reviews, ratings, prices you report, photos, comments, wishlist items, votes, follows and private messages.
• Technical and safety data — IP address, browser/device type and timestamps, used to prevent abuse and ban evasion.
• Usage measurement — page views and searches, recorded in our own database only if you allow it in the consent banner. We use no advertising pixels and no third-party trackers.

Why we may use it (lawful basis)

• Contract (Art. 6(1)(b)) — creating your account, publishing your reviews, delivering messages, converting prices to your currency.
• Legitimate interests (Art. 6(1)(f)) — keeping the community safe, preventing spam, fake reviews and ban evasion, and securing the service.
• Consent (Art. 6(1)(a)) — optional usage analytics and, if you enable them, push notifications. You can withdraw consent at any time in Settings.
• Legal obligation (Art. 6(1)(c)) — responding to lawful requests and retaining records where the law requires it.

Who can see your content

Public profiles and their reviews are visible to anyone, including people who are not signed in, and may be indexed by search engines. Private profiles are visible only to friends — people you follow who also follow you back. This is enforced on our servers, not only in the app. Private messages are visible to the people in the conversation and, where a report is made, to our moderation team.

Who we share it with

We do not sell personal data. We use processors who host the app, database, file storage and transactional email on our behalf, bound by data processing agreements. Where data is transferred outside the EEA, it is covered by the European Commission's Standard Contractual Clauses.

How long we keep it

• Account data and content: until you delete them or close your account.
• Safety records (IP logs, ban records, reports): up to 12 months, or longer where an active investigation or legal claim requires it.
• Usage analytics: up to 24 months, then deleted.
• Backups roll off within 30 days of deletion, after which recovery is impossible.

Your rights

You have the right to access, correct, delete, restrict and object to processing of your data, and to data portability. From Settings you can download everything we hold about you as a file and permanently delete your account and all of your content — deletion is immediate and cannot be undone. For anything else, email privacy@mycelina.com; we answer within 30 days. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

Children

Celina is not for children under 13, and we delete accounts we learn belong to them.

Storage on your device

We store a small amount of data on your device to keep you signed in, remember your makeup/perfume preference and your analytics choice. These are strictly necessary or consent-based; none of them profile you for advertising.