Privacy Policy

1. Information We Collect

TanningAI collects information you provide directly — such as your name, email, skin-tone results, skin-shade journal entries, and protection reminder sessions — when you create an account or complete the onboarding quiz. We also collect location data (with your permission) to provide UV index forecasts for your area, and device information and app interactions for analytics. Optional Google Sign-In also collects sign-in usage and technical metadata, such as SDK version and device type, for authentication and service analytics.

2. How We Use Your Information

We use your data to deliver personalised UV forecasts, real-time UV alerts, and your skin-shade journal. Location data is used solely for weather and UV forecasting. We do not sell your personal information to third parties. The iOS app does not use advertising identifiers or share app activity or App Store purchases with advertising networks for cross-app tracking.

3. Data Storage & Security

Your data is encrypted in transit and at rest. We use Cloudflare infrastructure for our API and database. The following sections explain the optional face scan separately.

3.1 Face data collected and processed

When you choose the optional camera scan, TanningAI processes a photograph of your face on your device. Apple Vision temporarily detects a face bounding box and two-dimensional facial landmarks to locate skin regions. The app samples skin colors and computes a shade category, a cosmetic hydration estimate, a Fitzpatrick category, CIELAB color values (L*, a*, b*), a confidence score, and a scan timestamp. These estimates are not medical measurements. TanningAI does not create a face-recognition template, identify a person from their face, or collect a TrueDepth face mesh.

3.2 Purposes and choices

Face data is used only to provide the optional skin-tone scan, show the result, and maintain your saved skin-shade journal and profile. You can review and adjust the shade before saving. Facial landmarks and sampled pixel buffers are used temporarily in memory and are not saved or transmitted. An unsaved photograph and result are discarded when the scan flow is closed or retaken. We do not use face data for advertising, tracking, identity verification, training AI models, or any other planned purpose.

3.3 Storage and sharing

If you save a scan, the photograph, a compressed image copy, the shade and cosmetic hydration estimates, Fitzpatrick category, scan timestamp, and CIELAB color values are stored in the app sandbox on your device. The separate JPEG file uses iOS complete file protection. Only the shade, hydration estimate, Fitzpatrick category, and scan timestamp are synchronized with your account through our API and stored in Cloudflare D1. Shade observations can also appear in your journal and activity records. Photos, facial landmarks, CIELAB values, and confidence scores are not sent to our servers or third-party AI services. Cloudflare processes the synchronized numerical results as our hosting and database provider. We do not sell face data or share it with advertising companies. Apple Vision performs the image analysis locally; using that framework does not send the scan photo to Apple for analysis.

3.4 Retention and deletion

Unsaved scan photos and results are held only for the scan flow, and facial landmarks are held only during analysis. Saved scan photos and results have no automatic expiry and remain in local app storage until you reset local app data, successfully delete your account on that device, or delete the app. Account deletion clears the saved scan records and separate JPEG files on the requesting device. Server-side numerical results remain while your account is active. An account deletion request disables account access immediately; the numerical results and associated profile, journal, and activity records are purged by the first daily cleanup after 30 days (normally within 31 days of the request). Cloudflare disaster-recovery history may retain deleted database data for up to a further 30 days before it expires. It is not used for normal app operations. Device backups you enable through Apple or a computer are controlled by your backup settings; deleting app data does not erase an existing device backup. Offline copies on another device remain until that installation is cleared or the app is deleted.

3.5 How to request deletion

To delete your account and synchronized results, open Profile, choose Delete Account, type DELETE, and confirm. To clear only local data when the Reset App Data option is shown in Profile, choose Reset App Data and confirm; this does not delete synchronized server data. You may also request deletion at privacy@tanningai.app. Revoking camera access in iOS Settings prevents new captures but does not delete previously saved data.

4. Payment Data

Payments for web purchases are processed by Paddle, acting as Merchant of Record. Your card or payment details are entered directly with Paddle — we never receive or store them. From Paddle we receive only your subscription status, plan type, Paddle customer and subscription identifiers, and payment status timestamps, which we use to activate and manage your subscription.

5. Third-Party Services

We share data with a small number of service providers, strictly to operate TanningAI:

• Paddle — payments, subscriptions, taxes, refunds — Merchant of Record for web purchases.
• Apple — App Store purchases and WeatherKit forecasts.
• Cloudflare — hosting and data storage infrastructure.
• Adapty — App Store subscription management and purchase analytics, using account or device identifiers, purchase history, and paywall interactions. Advertising identifier collection is disabled.
• Open-Meteo — location search and location-based weather forecasts when Apple Weather is unavailable.
• OpenWeather — location-based UV data through our backend when direct forecasts are unavailable. The displayed credit identifies the actual provider.
• Google — authentication if you choose Google Sign-In.
• Resend — transactional emails, including sign-in links you request.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@tanningai.app. If you are in the EU or UK, you have additional rights under GDPR, including data portability and the right to withdraw consent. You can revoke camera and location access in iOS Settings and delete your account and associated app data from Profile → Delete Account. We retain profile data while your account is active. Account deletion and the retention of scan-derived data follow the schedule in section 3.4; records required to meet legal obligations may be retained separately.

7. Contact

For any privacy-related questions, reach out to privacy@tanningai.app.