Sunglow · Privacy policy
Operator
Sunglow is operated by Özgür Yalım. This policy describes the current iOS app and backend. Updated 30 September 2026. Contact:ozguryalm@gmail.com
Account and plan
Apple or Google sign-in uses Firebase Authentication, which may hold your name, email and provider identifiers. Our backend stores account ID, email, optional adult age band and sex, chosen skin type, SPF, surface, target date, session timing, UV estimates and skin-feel feedback. RevenueCat processes purchase status and an account identifier. Apple processes payments; we do not receive payment-card details.
Location
Location access is optional, only while using the app. You can choose a city instead. Weather requests are rounded on the device to an approximately 5 km area before reaching the backend. Sessions store that approximate area. We do not request background location.
Photos and sensitive preferences
Previews, skin masks and colour measurements are processed on your device. Progress photos stay in protected app storage by default. Sun-sensitivity groups remain on your device and are excluded from the profile API and analytics. Camera access and photo selection are your choices.
Optional encrypted backup
If enabled, each photo and its measurement are encrypted on the device with AES-GCM. The server receives ciphertext, wrapped photo keys and metadata: account ID, photo ID, date, pose and size. Your master key is in iCloud Keychain. The server holds an encrypted recovery envelope, not the plaintext key or recovery code. We cannot open the photos. Keep your 24-character recovery code safe. Turning backup off stops sync and keeps the existing backup.
Optional diagnostics
Usage and error reporting is off by default. With consent, Firebase Analytics and Crashlytics receive fixed product events, crash reports and app/device diagnostics. MetricKit contributes aggregated launch, crash and hang counts. Events exclude photos, medication choices, coordinates and Sunglow account IDs. Advertising consent is denied and IDFA is not used. Withdraw consent in Account and preferences.
Retention and control
Delete photos or your account in the app. Offline photo deletions wait for successful sync. Account deletion removes backend profile, sessions, encrypted photo objects and Firebase account, then clears this device's app data. It does not cancel an Apple subscription: manage that in Apple Settings. Database backups rotate within 14 days. Contact us for access, correction or deletion. Providers may operate internationally under their processing terms.
Providers and purpose
Firebase provides sign-in and optional diagnostics; RevenueCat manages subscriptions; Apple provides payments, iCloud Keychain, MapKit and weather; Open-Meteo may supply fallback weather. Self-hosted PostgreSQL and S3-compatible storage hold the data described here. We use data to operate Sunglow and, with consent, improve reliability. We do not sell data or use it for cross-app advertising.