Privacy policy

• Account — your email address, name, and profile photo, so you can sign in and friends can recognize you.
• Skin profile — your skin type, tan goal, pace, and (if you use the scan) a face photo and its analysis. These personalize every recommendation in the app.
• Sessions — when you tan, for how long, the UV index, and the place name and coordinates of where you tanned, so your history makes sense.
• Selfies — tan-progress photos you choose to add. They are stored in a private bucket that only your account can read. Friends and partners never see them.
• Social — your friend connections and couple pairing. Friends see only your name, photo, streak, and whether you are tanning right now.
• Coach messages — what you ask the AI coach and its replies, kept so your conversation has memory.
• Purchases — whether you have Plus or Lifetime, managed by Apple and RevenueCat. We never see your payment details.
• Push token— a device token so your partner's nudges can reach you. No location or content is in it.

Two optional features use AI, and both are powered by Anthropic, our third-party AI provider. Sundial asks for your explicit consent inside the app before either feature sends anything, and you can use the rest of the app without ever turning them on.

Skin scan (face data). If you choose to scan, the front-camera photos you take are sent to Anthropic to estimate your Fitzpatrick skin type, current tan tone, and undertone. These photos are used only to produce that estimate — never for facial recognition, never to identify or track you, never for advertising, and never sold or shared with anyone beyond Anthropic for this single purpose. The resulting estimate and one reference photo are stored privately in your own account so the app can personalize your plan. The scan is optional; you can skip it and enter your skin type by hand.

Coach.When you message the coach, your message along with your skin profile, recent sessions, and today's UV are sent to Anthropic to generate a relevant reply. This is used only to answer you and is kept as your conversation history.

Retention and deletion. Face-scan photos, the scan analysis, and coach messages live in your account until you delete them. Deleting your account (Me → Privacy & data → Delete account) erases all of them immediately and permanently. Anthropic processes this data only to provide the feature and does not use it to identify you or for advertising.

Your location is read on your device to fetch the local UV index and find tan spots near you. Live location is never shared with other users and never used for advertising.

• Supabase — hosts our database, authentication, and photo storage.
• Anthropic — our AI provider; processes skin-scan photos and coach conversations to generate your results. Does not use your data to identify you or for advertising.
• Open-Meteo — receives coordinates (nothing else) to return UV forecasts.
• OpenStreetMap (Overpass) — receives coordinates (nothing else) to find nearby beaches, parks, and pools.
• Apple & RevenueCat — handle payments and subscription status.

Each receives only what it needs to do its job. None of them are advertising companies.

Sundial has full account deletion built in: Me → Privacy & data → Delete account. It permanently erases your profile, sessions, selfies, coach history, friendships, and pairing. There is no undo and no “we keep it for 90 days.”

Burn limits, SPF suggestions, vitamin D numbers, and tan estimates are guidance from published heuristics — not a medical device. Know your skin, and ask a doctor if you are unsure about sun exposure.

Sundial is not directed at children under 13, and we do not knowingly collect their data.

If this policy changes meaningfully, the app will say so. Questions or requests: help@heysundial.com.