Privacy Policy

Last updated: 20 September 2026 · Singapore PDPA-aligned

1. Data We Collect

ATW collects the following types of information:

  • Account information: name, email address, password (encrypted)
  • Order information: shipping address, order history, payment confirmation (we do not store card details — handled by Stripe)
  • Assessment data: your wellness assessment responses and generated protocols
  • Usage data: page visits, interactions, campaign source, product journey and verified transaction state through ATW first-party analytics and Google Analytics
  • Communications: messages you send us via WhatsApp, email, or our AI Advisor
  • Optional voice input: audio for speech recognition and the resulting transcript when you use a voice control

2. How We Use Your Data

Your data is used to:

  • Process and fulfill your orders
  • Provide personalized aromatherapy recommendations
  • Manage your membership, entitlement and fulfilment
  • Send order confirmations and service updates (transactional)
  • Send wellness content and promotions (with your consent, opt-out anytime)
  • Improve platform quality using consented, minimized and appropriately aggregated data

3. Data Storage and Security

We use Supabase for account data, with row-level security policies to restrict access. Physical-product payments are handled by Stripe. Where enabled, digital in-app payments are handled by Apple App Store or Google Play, with RevenueCat supporting purchase verification and access to purchased features. ATW does not store full payment-card details. Data is transmitted over HTTPS/TLS.

4. Third-Party Services

Depending on the features enabled and used, the following services may process your data:

  • Stripe: Payment processing (Singapore)
  • Supabase: Database and authentication
  • Google Analytics: Website analytics (anonymized IP)
  • Meta Pixel: Advertising measurement (with consent)
  • Anthropic (Claude): AI replies and wellness reflections, using messages, recent conversation context and relevant assessment information sent through ATW
  • OpenAI: AI replies and, where enabled, voice processing; messages or audio needed for the selected feature are sent through ATW
  • Device speech services: optional App voice input uses Apple speech recognition on iOS or the configured Android recognition service, such as Google. Audio may be processed on provider servers according to the service and device settings.
  • RevenueCat: if in-app billing is enabled and you open purchase, restore or subscription-management features, your ATW account identifier and purchase information are processed to verify transactions and manage purchased access
  • Apple App Store / Google Play: where digital in-app purchases are available, the store handles payment and purchase records under its own terms.

Voice input is optional and typing remains available. Where voice input is available, you can review the recognized text before sending it. Voice processing depends on the enabled service.

Speech and store privacy information: Apple speech recognition · Google privacy · Apple App Store privacy

5. Your Rights (Singapore PDPA)

Under Singapore's Personal Data Protection Act, you have the right to:

  • Access the personal data ATW holds about you
  • Correct inaccurate personal data
  • Withdraw consent for marketing communications at any time
  • Request deletion of your account and associated data

To exercise these rights, email hello@atw.sg.

6. Cookies

ATW uses essential cookies for authentication and privacy-minimized first-party journey measurement, including random visitor and 30-minute session identifiers. These identifiers do not contain your name, email, phone number, chat text or assessment answers. Where enabled, Google Analytics uses separate analytics cookies. Analytics availability never determines payment, entitlement or access to core platform functions.

7. Data Retention

We retain account and order data according to service, legal and accounting requirements. Assessment data is retained while your account is active. The operational retention target is 13 months for anonymous usage analytics and 24 months for authenticated product analytics. You may request access or deletion; deleting an ATW ID removes its linked product-analytics identity records, while legally required transaction records are governed separately.

AI and speech providers apply their own retention rules for the service used, including applicable safety and legal requirements. Ending a chat does not itself request deletion from those providers. See the provider links above for their current policies and available data controls.

8. Contact Our Data Officer

For privacy-related inquiries, contact: hello@atw.sg · WhatsApp: +65 9355 7508