Privacy Policy

SunVitD ("we", "us", "our") is a personal health intelligence platform operated by:

Data controller for the purposes of GDPR and applicable privacy laws: AWMB Sp. z o.o.

Contact: awmb_ltd@proton.me

Data you provide directly:

• Email address (for account creation and daily reports)
• Skin type (Fitzpatrick scale, 1–6)
• Sun exposure readings you log manually

Data collected automatically:

• GPS location (used only to fetch local UV index and air quality — never stored permanently)
• UV index readings from your sessions
• Estimated vitamin D production per session (IU)
• Device type and browser (for app functionality)

Data we do NOT collect:

• Medical records or health diagnoses
• Blood test results
• Precise location history (coordinates are discarded after fetching conditions)

• To calculate your personalized vitamin D estimates
• To display your exposure history and trends
• To send your daily sun report email (Pro/Trial users only)
• To maintain your account and subscription status
• To improve our algorithms and app experience

We do not sell your data. We do not use your data for advertising.

EU / EEA users (GDPR):

• Contract performance — to provide the service you signed up for
• Legitimate interest — to improve app functionality and security
• Consent — for optional email reports (unsubscribe at any time)

UK users (UK GDPR):

The same legal bases apply under the UK GDPR. Contact: awmb_ltd@proton.me.

US users (CCPA):

California residents have rights under CCPA including the right to know, delete, and opt-out of sale of personal information. We do not sell personal information. Equivalent rights apply in Virginia, Colorado, Connecticut, Texas, and other US states with applicable privacy laws.

Canadian users (PIPEDA / Law 25):

We comply with Canada's PIPEDA and Quebec's Law 25. You have the right to access, correct, and request deletion of your personal information.

We use the following third-party processors:

• Supabase — database and authentication
• Stripe — payment processing (we never see your card details)
• Resend — transactional email delivery
• Open-Meteo — UV and weather data (no personal data sent)
• Vercel — web hosting

We do not share or sell your data to any other parties.

Your data may be processed in countries outside your own, including the United States and EU member states. Where required, we use Standard Contractual Clauses for EU/UK data exports.

• Account data: retained while your account is active
• Exposure readings: deleted when you delete your account
• Location data: never persisted — discarded after each session
• Email: removed immediately upon unsubscribe or account deletion

Regardless of your location, you may:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data (CSV available in-app)
• Withdraw consent at any time

Email awmb_ltd@proton.me — we respond within 30 days.

We use minimal cookies for authentication (session token) and preference storage only. No advertising or tracking cookies.

SunVitD is not directed at children under 13 (under 16 in the EU). We do not knowingly collect data from children. Contact us for immediate deletion if this has occurred.

We will notify registered users by email of any material changes.

EU/EEA: contact your local data protection authority. UK: ICO (ico.org.uk). Canada: OPC (priv.gc.ca).