Privacy

Effective Date: January 1, 2026
Last Updated: January 1, 2026

Bristlecone Labs LLC (“we,” “us,” or “our”) operates the Sunscreen mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address and username.

• Profile Information: Your sunscreen application logs, including dates, times, SPF levels, and optional notes you add.

• Communications: If you contact us for support, we may retain your correspondence.

1.2 Information Collected Automatically

• Location Data: With your permission, we collect your device’s location to provide weather and UV index information relevant to your area. You can disable location access in your device settings at any time.

• Usage Data: We collect information about how you use the App, including features accessed, time spent, and interaction patterns.

• Device Information: We may collect device type, operating system version, and unique device identifiers.

1.3 Information from Third Parties

We may receive information from third-party services you connect to your account or that we use to operate the App.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App

• Display weather and UV conditions based on your location

• Track your sunscreen application streaks and history

• Enable leaderboard and social features

• Process subscription payments

• Send you notifications and reminders (with your consent)

• Respond to your inquiries and provide customer support

• Analyze usage patterns to improve user experience

• Track affiliate link clicks for commission attribution

• Comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate the App. These services may collect information sent by your device as part of providing their services to us.

• Supabase (Database and authentication): https://supabase.com/privacy

• RevenueCat (Subscription management): https://www.revenuecat.com/privacy

• PostHog (Analytics and feature flags): https://posthog.com/privacy

• Apple WeatherKit (Weather and UV data): https://www.apple.com/legal/privacy/

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly agree to share information.

• Leaderboard Features: Your username and streak data may be visible to other users if you participate in leaderboards.

• Service Providers: With third-party vendors who assist us in operating the App, subject to confidentiality obligations.

• Legal Requirements: If required by law, regulation, or legal process.

• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time (see Section 7).

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

7. Your Rights and Choices

7.1 All Users

• Access and Update: You can access and update your account information within the App settings.

• Delete Account: You can request deletion of your account by contacting us at hello@bristleconelabs.co.

• Location Access: You can enable or disable location services in your device settings.

• Notifications: You can manage notification preferences in the App or your device settings.

7.2 European Economic Area (EEA) Residents — GDPR Rights

If you are in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data.

• Right to Rectification: Request correction of inaccurate data.

• Right to Erasure: Request deletion of your personal data.

• Right to Restrict Processing: Request limitation of processing.

• Right to Data Portability: Receive your data in a structured, machine-readable format.

• Right to Object: Object to processing based on legitimate interests.

• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at hello@bristleconelabs.co. We will respond within 30 days.

Legal Basis for Processing: We process your data based on:

• Performance of a contract (providing App services)

• Your consent (location data, notifications)

• Legitimate interests (analytics, improving the App)

7.3 California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected.

• Right to Delete: Request deletion of your personal information.

• Right to Opt-Out: We do not sell personal information, so this right does not apply.

• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at hello@bristleconelabs.co.

8. Children’s Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App and updating the “Last Updated” date. Your continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Bristlecone Labs LLC
Email: hello@bristleconelabs.co
Website: thesunscreenapp.com