Privacy Policy Sundaze - Your Personal Tanning Companion Last Updated: April 17, 2026 Effective Date: April 17, 2026 Introduction Welcome to Sundaze ("Company," "we," "us," or "our"). Sundaze is a mobile application designed to help you achieve your tanning goals safely and effectively. We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you download, access, or use the Sundaze mobile application (the "App") and any related services. By downloading, installing, accessing, or using Sundaze, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use the App. Table of Contents 1. Information We Collect 2. How We Collect Information 3. How We Use Your Information 4. How We Share Your Information 5. Data Storage and Security 6. Data Retention 7. Your Rights and Choices 8. Location Services 9. Push Notifications 10. Children's Privacy 11. Third-Party Services 12. International Data Transfers 13. Changes to This Policy 14. Contact Us 15. Additional Disclosures Information We Collect 1. Information You Provide Directly Account and Profile Information: - Display name (chosen by you) - Profile photograph (optional, uploaded from your camera or photo library) - Friend code (automatically generated unique identifier for social features) Skin and Health-Related Information: - Fitzpatrick skin type (Type I-VI) indicating your skin's response to UV exposure - Skin sensitivity preferences - Whether you burn easily, tan gradually, or rarely burn - Tanning goals (e.g., base tan, maintain tan, vitamin D, event preparation) - Tanning experience level Tanning Session Data: - Date and time of each tanning session - Duration of sun exposure (front and back) - Location where you tanned - UV index during your session - Weather conditions during your session - Notes you add to sessions - Session completion status Tanning Plans: - Custom tanning schedules you create - Plan names and descriptions - Scheduled session times and durations - Plan progress and completion data Preferences and Settings: - Temperature unit preference (Fahrenheit/Celsius) - Notification preferences - Theme selection - Haptic feedback preferences - UV alert settings and timing 2. Information Collected Automatically Location Data: - Precise geographic location (latitude and longitude) when you grant permission - City, region, and country derived from your location - Location history for weather data retrieval - Saved/favorite locations you select Device Information: - Device type and model - Operating system and version - Unique device identifiers - App version - Language and locale settings - Time zone Usage and Analytics Data: - App opens and session frequency - Features used and interaction patterns - Screens viewed and time spent - Button clicks and navigation paths - Error logs and crash reports - Performance metrics Weather and UV Data Retrieved: - Current UV index at your location - Hourly UV forecasts - Temperature and "feels like" temperature - Humidity levels - Cloud cover percentage - Sunrise and sunset times - Multi-day weather forecasts 3. Information from Third Parties Weather Service Providers: - Real-time and forecasted UV index data - Weather conditions and atmospheric data - Astronomical data (sunrise/sunset times) App Store (Apple): - Subscription status and purchase history - Account verification for premium features Authentication Services: - Anonymous authentication tokens - Session management data How We Collect Information We collect information through: 1. Direct Input: When you create a profile, set preferences, log sessions, or interact with App features 2. Automatic Collection: Through your device when you use the App 3. Device Sensors: Location services (GPS) with your permission 4. Camera/Photo Library: When you choose to upload a profile photo 5. Third-Party APIs: Weather and UV data services based on your location 6. Analytics Tools: To understand App usage patterns How We Use Your Information We use your information for the following purposes: Core App Functionality - Calculate Safe Exposure Times: Using your skin type and current UV index to estimate burn times and recommended session durations - Provide UV Information: Displaying real-time and forecasted UV data for your location - Track Tanning Progress: Maintaining your session history, statistics, and streaks - Deliver Personalized Recommendations: SPF suggestions, optimal tanning times, and vitamin D calculations based on your profile - Send Flip Reminders: Notifying you during active sessions when to turn over for even tanning - Manage Tanning Plans: Creating, scheduling, and tracking your tanning schedules Social Features - Enable Friend Connections: Allowing you to connect with other users via friend codes - Display Leaderboards: Showing tanning statistics among connected friends (display name and stats only) - Share Achievements: Displaying your tanning milestones and badges Communications - Push Notifications: Flip reminders, session alerts, UV warnings, and plan reminders - UV Alerts: Daily notifications about UV conditions when enabled - App Updates: Information about new features and important changes Service Improvement - Analytics: Understanding how users interact with the App to improve features - Bug Fixes: Identifying and resolving technical issues - Feature Development: Developing new functionality based on usage patterns - Performance Optimization: Ensuring the App runs smoothly Business Operations - Process Subscriptions: Managing premium feature access - Customer Support: Responding to inquiries and issues - Legal Compliance: Meeting legal obligations and enforcing our terms How We Share Your Information We Do Not Sell Your Personal Information We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Service Providers We share information with third-party service providers who assist us in operating the App: Cloud Hosting (Supabase): Account data, sessions, friend connections - Secure data storage and sync Weather API: Location coordinates - Retrieve UV and weather data Analytics: Anonymized usage data - App improvement Push Notifications: Device tokens - Deliver notifications All service providers are bound by confidentiality agreements and data processing terms. Social Features (User-Controlled) When you use social features, certain information may be visible to other users: - Friends: Your display name, profile photo, and tanning statistics - Leaderboards: Your display name and ranking metrics - Friend Codes: Shared only when you choose to share them Legal and Safety Disclosures We may disclose your information when required: - To comply with applicable laws, regulations, or legal processes - To respond to lawful requests from government authorities - To enforce our Terms of Service - To protect the rights, property, or safety of Sundaze, our users, or the public - To detect, prevent, or address fraud, security, or technical issues Business Transfers In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change. Data Storage and Security Where Your Data is Stored - On Your Device: Settings, preferences, and cached data are stored locally - Cloud Servers: Account information, session history, and social data are stored on secure servers (Supabase/AWS infrastructure) - Servers are located in: United States Security Measures We implement industry-standard security measures: - Encryption in Transit: All data transmitted between your device and our servers uses TLS/HTTPS encryption - Encryption at Rest: Sensitive data is encrypted when stored - Access Controls: Limited employee access on a need-to-know basis - Authentication: Secure token-based authentication - Regular Audits: Periodic security assessments and updates - Secure Infrastructure: Enterprise-grade cloud hosting with security certifications Security Limitations While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. Data Retention Active Accounts We retain your data for as long as your account remains active or as needed to provide services. Data Retention Periods Account Information: Until account deletion Tanning Sessions: Until account deletion Location Data: Processed in real-time, not permanently stored Analytics Data: 24 months (anonymized) Support Communications: 3 years Account Deletion Upon account deletion request: - Personal data is deleted within 30 days - Some anonymized data may be retained for analytics - Backup copies may persist for up to 90 days before complete deletion Your Rights and Choices Access and Portability - View your data within the App settings - Request a copy of your data by contacting us Correction - Update your profile, skin type, and preferences anytime in the App Deletion - Delete your account through the App settings or by contacting us - Request deletion of specific data Opt-Out Options Push Notifications: Device Settings > Notifications > Sundaze Location Services: Device Settings > Privacy > Location Services > Sundaze UV Alerts: App Settings > Notifications > UV Alerts Analytics: App Settings > Privacy > Analytics (if available) Withdraw Consent You may withdraw consent for optional data collection at any time, though this may limit App functionality. Location Services How We Use Location Location is central to Sundaze's functionality: - UV Index: Retrieving accurate UV data for your specific location - Weather Data: Providing local temperature, humidity, and conditions - Sunrise/Sunset: Calculating optimal tanning windows - Session Logging: Recording where you tanned (optional) Location Permission Levels - While Using the App: Location accessed only when App is open - Always: Required for background UV alerts and scheduled notifications - Never: App will have limited functionality without location Location Data Handling - Location coordinates are sent to weather APIs to retrieve data - We do not permanently store precise location history - You can use manual location entry as an alternative Push Notifications We may send the following types of notifications: Flip Reminders: Alert during active session to turn over - Automatic during session Session Timers: Notify when session is complete - Automatic during session UV Alerts: Daily UV conditions at your location - Opt-in, configurable time Plan Reminders: Upcoming scheduled tanning sessions - Opt-in with plans Achievements: Celebrate milestones and streaks - Can disable You can disable notifications at any time through device settings or within the App. Children's Privacy Sundaze is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at sundazesupport@gmail.com. If we discover that we have collected information from a child under 13, we will promptly delete that information. Users between 13 and 18 should have parental or guardian consent before using the App. Third-Party Services The App integrates with or links to third-party services: Weather Data Providers - Provide UV index, temperature, and weather data - Receive only location coordinates needed for queries Apple App Store - Processes subscription payments - Manages purchase verification - Subject to Apple's Privacy Policy Supabase (Database/Authentication) - Stores account and session data - Provides anonymous authentication - Subject to Supabase's Privacy Policy Analytics Services - Collect anonymized usage data - Help us understand App performance We encourage you to review the privacy policies of these third-party services. International Data Transfers Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to the United States and other countries where we or our service providers operate. We ensure appropriate safeguards are in place, including: - Standard contractual clauses - Data processing agreements - Compliance with applicable data transfer regulations Changes to This Policy We may update this Privacy Policy periodically. When we make changes: - We will update the "Last Updated" date at the top - For material changes, we will provide notice through the App or via email - Continued use after changes constitutes acceptance We encourage you to review this Privacy Policy regularly. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: Support Email: sundazesupport@gmail.com We will respond to privacy-related inquiries within 30 days. Additional Disclosures California Residents (CCPA/CPRA) If you are a California resident, you have the following rights: - Right to Know: Request disclosure of personal information collected, sources, purposes, and third parties with whom we share - Right to Delete: Request deletion of your personal information - Right to Correct: Request correction of inaccurate information - Right to Opt-Out of Sale: We do not sell personal information - Right to Non-Discrimination: We will not discriminate against you for exercising your rights Categories of Personal Information Collected: - Identifiers (name, device ID, friend code) - Protected characteristics (skin type for service purposes only) - Geolocation data - Internet/electronic activity - Inferences drawn from the above To Exercise Your Rights: Email: sundazesupport@gmail.com with "California Privacy Request" in the subject line European Residents (GDPR) If you are in the European Economic Area (EEA), United Kingdom, or Switzerland: Legal Bases for Processing: - Contract: To provide the App services you requested - Legitimate Interests: To improve our services, ensure security, and prevent fraud - Consent: For optional features like notifications and analytics Your Rights: - Access your personal data - Rectify inaccurate data - Erase your data ("right to be forgotten") - Restrict processing - Data portability - Object to processing - Withdraw consent - Lodge a complaint with a supervisory authority Data Controller: Sundaze [Your Address] Email: sundazesupport@gmail.com Nevada Residents Nevada residents may opt out of the sale of personal information. We do not currently sell personal information as defined by Nevada law. Virginia, Colorado, Connecticut, and Utah Residents Residents of these states have similar rights to access, delete, correct, and opt-out. Contact us to exercise these rights. Cookies and Tracking The Sundaze mobile app does not use browser cookies. We may use similar technologies: - Local Storage: To save preferences and cached data on your device - Analytics SDKs: To collect anonymized usage data - Device Identifiers: For analytics and to prevent fraud Data Security Incident Response In the event of a data breach affecting your personal information: - We will investigate promptly - We will notify affected users as required by law - We will take steps to mitigate harm - We will report to relevant authorities if required This Privacy Policy is effective as of the date stated above and governs your use of Sundaze. By using Sundaze, you acknowledge that you have read and understood this Privacy Policy.