Privacy Policy

TanCue (“TanCue”, “we”, “us”) is a UV-aware tanning planner for iPhone. We built TanCue to be private by design: the personal data that makes the app work — your skin profile, your sessions, your streaks and history, and any selfie used for a skin-tone read — stays on your device (and in your own private iCloud if you enable iCloud backup). This policy explains what is processed, by whom, and the choices you have.

The short version

• Your skin profile, sessions, history, and selfies are processed on your device and are not uploaded to us. The on-device AI coach uses Apple’s built-in models on your iPhone.
• To show live UV and the hourly forecast, the app uses your location with Apple WeatherKit.
• We use privacy-friendly, pseudonymous product analytics (PostHog, hosted in the EU) to understand which features are used and to improve the app.
• Purchases are handled by Apple and RevenueCat.
• We do not sell your personal data. There is no account and we do not ask for your name or email to use the app.

Data processed and why

Stays on your device (not collected by us)

• Skin profile & preferences (e.g. skin type, goals) — to personalize recommendations.
• Sessions, timers, streaks, history, reminders — to plan and track your tanning.
• Camera / photo for the skin-tone read — analyzed on-device with Apple’s Vision framework to estimate skin tone. The image is not uploaded and the estimate is confidence-scored, not a medical diagnosis.

Processed by third parties to deliver features

• Location → Apple WeatherKit. When you ask for live UV/forecast, your approximate or precise location is used to retrieve weather data from Apple WeatherKit. This is governed by Apple’s privacy terms. We do not store your location on our own servers.
• Product analytics → PostHog (EU Cloud, eu.posthog.com). We collect pseudonymous usage events (for example: screens viewed, onboarding and paywall steps, feature taps), together with general device/app information (device model, OS version, app version, language/region) and a random installation identifier. We do not send your selfies, your precise location history, or your skin profile to analytics. We use this only to measure and improve the product. PostHog acts as our data processor.
• Purchases → Apple & RevenueCat. Subscriptions are processed by Apple. We use RevenueCat to manage subscription status and entitlements; RevenueCat receives a pseudonymous app-user ID and purchase/subscription data. We never see your full payment card details.

Legal bases (EEA/UK GDPR)

Where GDPR/UK GDPR applies, we rely on: performance of a contract (to provide the features you request, such as weather-based recommendations and subscriptions); legitimate interests (to secure, maintain, and improve the app via pseudonymous analytics); and consent where required (for example, optional notifications and the device permissions you grant). You can withdraw permissions at any time in iOS Settings.

Sharing

We do not sell your personal data and do not share it for cross-context behavioral advertising. We share data only with the processors named above (Apple, RevenueCat, PostHog) to run the app, and where required by law.

Retention

On-device data remains until you delete it in the app or delete the app. Pseudonymous analytics and purchase records are retained only as long as needed for the purposes above and then deleted or aggregated.

Your choices and rights

• Permissions: control Location, Camera, Photos, and Notifications in iOS Settings at any time.
• Delete your data: deleting the app removes on-device data. To request deletion of pseudonymous analytics or purchase records associated with your installation, contact us (below).
• Depending on your region (EEA/UK GDPR, Brazil LGPD, California CCPA/CPRA, and others) you may have rights to access, correct, delete, or port your data, and to object to certain processing. We honor these requests as required by law.

Children

TanCue is not directed to children and is not intended for use by children under the age required by your local law (e.g. 13 in the US, 16 in parts of the EEA). We do not knowingly collect data from children.

Health & medical disclaimer

TanCue provides general, lower-risk sun guidance and self-tracking. It is not a medical device or medical service, does not provide medical advice, and its skin insights are estimates, not diagnoses. Always protect your skin and follow product and health guidance.

International transfers

Our analytics are hosted in the European Union. Apple and RevenueCat may process data in other countries under appropriate safeguards (such as Standard Contractual Clauses).

Changes

We may update this policy as the app evolves. We will post the new version here and update the “Last updated” date.

Contact

Questions or privacy requests: support@tancue.app