UVPro – Privacy Policy (EN)

Effective Date: August 14, 2025

This document explains how we collect, use, and protect your personal data for UVPro ("Application"). The Application is published by RL Apps. For questions: contact@rlapps.io

1) In Brief

  • The Application processes location information, device identity, optional photo(s), and skin analysis results.

  • Photos are uploaded to Supabase Storage for analysis and stored in the Supabase database along with analysis results.

  • Only coordinates are sent to OpenWeatherMap for weather/UV data.

  • Subscription management is handled through RevenueCat and Apple App Store.

  • Local (on-device) settings and counters are stored with Hive/SharedPreferences.

2) Data We Collect and Purposes

  • Location Information (latitude/longitude): To display weather and UV index, generate personalized protection recommendations. Location data is not permanently stored on our servers by the Application; it is transmitted to the relevant API (OpenWeatherMap) during requests.

  • Photos (optional): Photos you take/select for skin analysis are uploaded to Supabase Storage. After analysis is completed, the result and photo link are saved to the database.

  • Skin Analysis Results: Analysis outputs such as skin type, confidence level, recommendations, safe duration, SPF advice, etc. are stored in the Supabase database.

  • Device Identity and Device Information: To anonymously identify the application, create user records, organize storage (e.g., file naming), prevent abuse. A persistent identity is generated/stored in the device's secure storage. Some basic device information (model, version, etc.) is kept in a privacy-focused manner.

  • Subscription Information: RevenueCat and App Store information (active subscription, authorization status) is processed to determine your Premium status. We do not process payment card data; it is managed by Apple.

  • In-App Counters and Settings: Trial period, analysis counter, onboarding, and preference data such as name/skin type are stored on the device (Hive/SharedPreferences).

3) Legal Bases for Processing (KVKK/GDPR)

  • Contract performance: To provide the service, manage subscriptions, provide requested skin analysis and personalized recommendations.

  • Legitimate interest: To operate the service securely and stably, prevent abuse, improve performance.

  • Explicit consent: For optional processes such as photo upload and analysis.

4) Third Parties and Transfers

  • Supabase: Hosting, database, file storage, and Edge Functions. Photos are uploaded to Storage; analysis results are stored in the database.

  • OpenWeatherMap: Coordinates are transmitted for location-based weather/UV data.

  • RevenueCat: Management and verification of subscriptions (App Store).

  • Apple App Store / In‑App Review: Purchase, subscription, review processes.

Note: A publicly accessible link (public URL) may be created for photos on Supabase Storage. While this link is not proactively shared with others unless shared, anyone with the link can view it. Therefore, be careful when uploading sensitive content.

5) Retention Periods

  • Photos and analysis results: As long as your user account and service needs continue; for a reasonable period in accordance with legal obligations and legitimate interests.

  • On-device data (settings/counters): Until deleted by the user or the application is uninstalled.

  • Subscription records: For periods compliant with Apple/RevenueCat policies.

6) User Rights

  • You have rights to access, correction, deletion, restriction of processing, objection, and data portability (to the extent applicable).

  • If you want permanent deletion of photos and analysis records, contact us at contact@rlapps.io. The "Clear Data" option in the application only deletes local data on your device; it does not remove server-side records.

7) Security

  • Device identity is kept in secure storage (Keychain, etc.).

  • Supabase uses TLS for data transmission. However, please remember that no method over the internet is 100% secure.

8) Children's Privacy

  • The Application is not intended for children under 16 years of age. If we become aware that we have collected data belonging to this age group, we will delete it.

9) International Transfer

  • Data may be processed on servers outside your country. Appropriate protection measures are provided (e.g., contractual safeguards).

10) Changes

  • This policy may be updated from time to time. We will notify you of significant changes through the application or by updating this document.

11) Contact

RL Apps
Email: contact@rlapps.io