Privacy Policy

1.Information We Collect

Information You Provide Directly

Account and Profile Information

• Display name (chosen by you)
• Profile photograph (optional, uploaded from your camera or photo library)
• Friend code (automatically generated unique identifier for social features)

Skin and Health-Related Information

• Fitzpatrick skin type (Type I through VI) indicating your skin's response to UV exposure
• Skin sensitivity preferences
• Whether you burn easily, tan gradually, or rarely burn
• Tanning goals (e.g., base tan, maintain tan, vitamin D, event preparation)
• Tanning experience level

Tanning Session Data

• Date and time of each tanning session
• Duration of sun exposure (front and back)
• Location where you tanned
• UV index during your session
• Weather conditions during your session
• Notes you add to sessions
• Session completion status

Tanning Plans

• Custom tanning schedules you create
• Plan names and descriptions
• Scheduled session times and durations
• Plan progress and completion data

Preferences and Settings

• Temperature unit preference (Fahrenheit/Celsius)
• Notification preferences
• Theme selection
• Haptic feedback preferences
• UV alert settings and timing

Information Collected Automatically

Location Data

• Precise geographic location (latitude and longitude) when you grant permission
• City, region, and country derived from your location
• Location history for weather data retrieval
• Saved/favorite locations you select

Device Information

• Device type and model
• Operating system and version
• Unique device identifiers
• App version
• Language and locale settings
• Time zone

Usage and Analytics Data

• App opens and session frequency
• Features used and interaction patterns
• Screens viewed and time spent
• Button clicks and navigation paths
• Error logs and crash reports
• Performance metrics

Weather and UV Data Retrieved

• Current UV index at your location
• Hourly UV forecasts
• Temperature and "feels like" temperature
• Humidity levels
• Cloud cover percentage
• Sunrise and sunset times
• Multi-day weather forecasts

Information from Third Parties

Weather Service Providers

• Real-time and forecasted UV index data
• Weather conditions and atmospheric data
• Astronomical data (sunrise/sunset times)

App Store (Apple)

• Subscription status and purchase history
• Account verification for premium features

Authentication Services

• Anonymous authentication tokens
• Session management data

2.How We Collect Information

We collect information through:

1. Direct Input: When you create a profile, set preferences, log sessions, or interact with App features
2. Automatic Collection: Through your device when you use the App
3. Device Sensors: Location services (GPS) with your permission
4. Camera/Photo Library: When you choose to upload a profile photo
5. Third-Party APIs: Weather and UV data services based on your location
6. Analytics Tools: To understand App usage patterns

3.How We Use Your Information

We use your information for the following purposes:

Core App Functionality

• Calculate Safe Exposure Times: Using your skin type and current UV index to estimate burn times and recommended session durations
• Provide UV Information: Displaying real-time and forecasted UV data for your location
• Track Tanning Progress: Maintaining your session history, statistics, and streaks
• Deliver Personalized Recommendations: SPF suggestions, optimal tanning times, and vitamin D calculations based on your profile
• Send Flip Reminders: Notifying you during active sessions when to turn over for even tanning
• Manage Tanning Plans: Creating, scheduling, and tracking your tanning schedules

Social Features

• Enable Friend Connections: Allowing you to connect with other users via friend codes
• Display Leaderboards: Showing tanning statistics among connected friends (display name and stats only)
• Share Achievements: Displaying your tanning milestones and badges

Communications

• Push Notifications: Flip reminders, session alerts, UV warnings, and plan reminders
• UV Alerts: Daily notifications about UV conditions when enabled
• App Updates: Information about new features and important changes

Service Improvement

• Analytics: Understanding how users interact with the App to improve features
• Bug Fixes: Identifying and resolving technical issues
• Feature Development: Developing new functionality based on usage patterns
• Performance Optimization: Ensuring the App runs smoothly

Business Operations

• Process Subscriptions: Managing premium feature access
• Customer Support: Responding to inquiries and issues
• Legal Compliance: Meeting legal obligations and enforcing our terms

4.How We Share Your Information

Service Providers

We share information with third-party service providers who assist us in operating the App:

• Cloud Hosting (Supabase): Account data, sessions, friend connections for secure data storage and sync
• Weather API: Location coordinates to retrieve UV and weather data
• Analytics: Anonymized usage data for App improvement
• Push Notifications: Device tokens to deliver notifications

All service providers are bound by confidentiality agreements and data processing terms.

Social Features (User-Controlled)

When you use social features, certain information may be visible to other users:

• Friends: Your display name, profile photo, and tanning statistics
• Leaderboards: Your display name and ranking metrics
• Friend Codes: Shared only when you choose to share them

Legal and Safety Disclosures

We may disclose your information when required:

• To comply with applicable laws, regulations, or legal processes
• To respond to lawful requests from government authorities
• To enforce our Terms of Service
• To protect the rights, property, or safety of Sundaze, our users, or the public
• To detect, prevent, or address fraud, security, or technical issues

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5.Data Storage and Security

Where Your Data is Stored

• On Your Device: Settings, preferences, and cached data are stored locally
• Cloud Servers: Account information, session history, and social data are stored on secure servers (Supabase/AWS infrastructure)
• Server Location: United States

Security Measures

We implement industry-standard security measures:

• Encryption in Transit: All data transmitted between your device and our servers uses TLS/HTTPS encryption
• Encryption at Rest: Sensitive data is encrypted when stored
• Access Controls: Limited employee access on a need-to-know basis
• Authentication: Secure token-based authentication
• Regular Audits: Periodic security assessments and updates
• Secure Infrastructure: Enterprise-grade cloud hosting with security certifications

Security Limitations

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6.Data Retention

Active Accounts

We retain your data for as long as your account remains active or as needed to provide services.

Data Retention Periods

• Account Information: Until account deletion
• Tanning Sessions: Until account deletion
• Location Data: Processed in real-time, not permanently stored
• Analytics Data: 24 months (anonymized)
• Support Communications: 3 years

Account Deletion

Upon account deletion request:

• Personal data is deleted within 30 days
• Some anonymized data may be retained for analytics
• Backup copies may persist for up to 90 days before complete deletion

7.Your Rights and Choices

Access and Portability

• View your data within the App settings
• Request a copy of your data by contacting us

Correction

• Update your profile, skin type, and preferences anytime in the App

Deletion

• Delete your account through the App settings or by contacting us
• Request deletion of specific data

Opt-Out Options

• Push Notifications: Device Settings › Notifications › Sundaze
• Location Services: Device Settings › Privacy › Location Services › Sundaze
• UV Alerts: App Settings › Notifications › UV Alerts
• Analytics: App Settings › Privacy › Analytics (if available)

Withdraw Consent

You may withdraw consent for optional data collection at any time, though this may limit App functionality.

8.Location Services

How We Use Location

Location is central to Sundaze's functionality:

• UV Index: Retrieving accurate UV data for your specific location
• Weather Data: Providing local temperature, humidity, and conditions
• Sunrise/Sunset: Calculating optimal tanning windows
• Session Logging: Recording where you tanned (optional)

Location Permission Levels

• While Using the App: Location accessed only when App is open
• Always: Required for background UV alerts and scheduled notifications
• Never: App will have limited functionality without location

Location Data Handling

• Location coordinates are sent to weather APIs to retrieve data
• We do not permanently store precise location history
• You can use manual location entry as an alternative

9.Push Notifications

We may send the following types of notifications:

• Flip Reminders: Alert during active session to turn over (automatic during session)
• Session Timers: Notify when session is complete (automatic during session)
• UV Alerts: Daily UV conditions at your location (opt-in, configurable time)
• Plan Reminders: Upcoming scheduled tanning sessions (opt-in with plans)
• Achievements: Celebrate milestones and streaks (can disable)

You can disable notifications at any time through device settings or within the App.

10.Children's Privacy

Sundaze is not intended for children under 13 years of age.

We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at sundazesupport@gmail.com.

If we discover that we have collected information from a child under 13, we will promptly delete that information.

Users between 13 and 18 should have parental or guardian consent before using the App.

11.Third-Party Services

The App integrates with or links to third-party services:

Weather Data Providers

• Provide UV index, temperature, and weather data
• Receive only location coordinates needed for queries

Apple App Store

• Processes subscription payments
• Manages purchase verification
• Subject to Apple's Privacy Policy

Supabase (Database/Authentication)

• Stores account and session data
• Provides anonymous authentication
• Subject to Supabase's Privacy Policy

Analytics Services

• Collect anonymized usage data
• Help us understand App performance

We encourage you to review the privacy policies of these third-party services.

12.International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws.

By using the App, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Data processing agreements
• Compliance with applicable data transfer regulations

13.Changes to This Policy

We may update this Privacy Policy periodically. When we make changes:

• We will update the "Last Updated" date at the top
• For material changes, we will provide notice through the App or via email
• Continued use after changes constitutes acceptance

We encourage you to review this Privacy Policy regularly.

14.Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Support email: sundazesupport@gmail.com

We will respond to privacy-related inquiries within 30 days.

15.Additional Disclosures

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of personal information collected, sources, purposes, and third parties with whom we share
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out of Sale: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Personal Information Collected

• Identifiers (name, device ID, friend code)
• Protected characteristics (skin type for service purposes only)
• Geolocation data
• Internet/electronic activity
• Inferences drawn from the above

To Exercise Your Rights

Email sundazesupport@gmail.com with "California Privacy Request" in the subject line.

European Residents (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland:

Legal Bases for Processing

• Contract: To provide the App services you requested
• Legitimate Interests: To improve our services, ensure security, and prevent fraud
• Consent: For optional features like notifications and analytics

Your Rights

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

Nevada Residents

Nevada residents may opt out of the sale of personal information. We do not currently sell personal information as defined by Nevada law.

Virginia, Colorado, Connecticut, and Utah Residents

Residents of these states have similar rights to access, delete, correct, and opt-out. Contact us to exercise these rights.

Cookies and Tracking

The Sundaze mobile app does not use browser cookies. We may use similar technologies:

• Local Storage: To save preferences and cached data on your device
• Analytics SDKs: To collect anonymized usage data
• Device Identifiers: For analytics and to prevent fraud

Data Security Incident Response

In the event of a data breach affecting your personal information:

• We will investigate promptly
• We will notify affected users as required by law
• We will take steps to mitigate harm
• We will report to relevant authorities if required