Skip to main content

Privacy Policy

This privacy policy applies to the Sunlit app (hereby referred to as "Application") for mobile devices that was created by Vidus6 (hereby referred to as "Service Provider") as a Freemium service. This service is intended for use "AS IS".

Last Updated: 2 August 2026

Information Collection and Use

Sunlit has no user accounts. It never asks for your name, your email address or a password. The Application collects the following:

  • Precise location (coordinates). With your permission, Sunlit reads your device's location and sends the coordinates to the Open-Meteo forecast service to retrieve the UV index and weather for that point. The coordinates are used for that request and to cache the forecast on your device. They are not stored on any Vidus6 server and are not linked to your identity. You can refuse location access entirely and search for a city by name instead — Sunlit then uses only that city.
  • Skin photos. If you choose to run the optional skin scan, the photo you take or select is sent once to Google Gemini through Firebase AI Logic for a single analysis. It is processed transiently for that request. Vidus6 does not store your photo on any server. A copy of the photo and the analysis result are saved on your device so the scan is still there tomorrow, and you can delete them from within the Application at any time.
  • Skin profile and session data you enter. Your Fitzpatrick skin type, tanning goal, usual SPF, exposed body area, session history and vitamin D log are stored on your device only.
  • Device and usage telemetry. A randomly generated application user id, device model, operating system version, app version, app language, device region, the screens you open, the features you use, and crash reports. This is processed by Arislytic, a first-party analytics service operated by Vidus6.
  • Subscription state. If you purchase Sunlit Premium, RevenueCat records the purchase and the entitlement against the same generated application user id.
  • Apple Search Ads attribution. On iOS, Sunlit collects the Apple AdServices attribution token and forwards it through RevenueCat so that Vidus6 can measure its own App Store advertising. This is Apple's "Standard" attribution tier. Sunlit does not use the IDFA, does not show ads, ships no advertising SDK, and does not present an App Tracking Transparency prompt.

The Application does not sell your personal information and does not share it with third-party advertisers.

Location Data

Sunlit requests location access only while the Application is in use ("When In Use"). It does not track your location in the background and does not build a location history. Your coordinates are used for one purpose: fetching the UV index and weather forecast for where you are. You can withdraw location permission at any time in your device settings, and Sunlit will keep working with a city you pin manually.

Use of Artificial Intelligence

The optional skin scan uses a generative AI model (Google Gemini, accessed through Firebase AI Logic) to estimate your Fitzpatrick skin type, undertone, hydration and skin condition from a photo.

  • The result is an estimate, not a diagnosis, and it can be wrong. You can correct it by hand.
  • The AI cannot detect skin cancer, moles, lesions or any medical condition, and no output of the Application should be read as a medical finding.
  • Your photo is sent for a single inference and is not used by Vidus6 to train any model.
  • Do not rely on the AI output to decide whether sun exposure is safe for you. See "Health Information" below.

Health Information

Sunlit estimates sun exposure limits and vitamin D synthesis from public UV data and the skin profile you enter. This information is provided for general wellness purposes only.

  • Sunlit is not a medical device, and it is not a substitute for professional medical advice, diagnosis or treatment.
  • The Application cannot see your skin, your medication or your medical history.
  • UV radiation damages every skin type. No exposure time is risk-free, and Sunlit never claims otherwise.
  • Consult a doctor or dermatologist before sunbathing if you take photosensitizing medication, have a skin condition or a history of skin cancer, or notice any change in a mole or spot.

The health-related data you enter (skin type, sessions, vitamin D log) stays on your device and is not transmitted to Vidus6.

Third Party Access

Only the data described above is transmitted to external services, and only for the purpose stated. The Application uses the following third-party services, each with its own privacy policy:

Analytics and crash reporting are handled by Arislytic, which is operated by Vidus6 itself rather than by a third party.

The Service Provider may disclose the information described above:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.

Your Rights Under the GDPR (European Economic Area and Switzerland)

If you are in the EEA or Switzerland, you have the right to access, rectify, erase, restrict and port your personal data, and to object to its processing. Because Sunlit has no account system, the personal data held about you consists of the telemetry described above, keyed to a randomly generated application user id. To exercise any of these rights, contact contact@vidus6.com with that id (you can find it in the Application's settings) and the Service Provider will respond within one month. You also have the right to lodge a complaint with your national data protection authority.

The legal basis for processing is your consent (location access, the optional skin scan) and the legitimate interest of the Service Provider in operating and improving the Application (telemetry, crash reports).

Your Rights Under the UK GDPR

If you are in the United Kingdom, the same rights apply, and you may lodge a complaint with the Information Commissioner's Office (ICO).

Your Rights Under the CCPA/CPRA (California)

If you are a California resident, you have the right to know what personal information is collected, to request its deletion, and to opt out of its sale or sharing. Vidus6 does not sell or share personal information as those terms are defined by the CCPA/CPRA, and does not use your data for cross-context behavioural advertising. You will never be discriminated against for exercising these rights. To make a request, contact contact@vidus6.com.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. You can also revoke location, camera and photo permissions individually in your device settings without uninstalling.

Data Retention Policy

Skin photos, skin profile, session history and the vitamin D log live only on your device. They are removed when you delete the individual scan within the Application, or when you delete the Application. Skin-scan photos sent for analysis are processed transiently by Google and are not retained by Vidus6. Analytics and crash-report events are retained for up to 24 months and then deleted. If you would like the Service Provider to delete data associated with your application user id, contact contact@vidus6.com and they will respond in a reasonable time.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (contact@vidus6.com) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains. All network traffic between the Application and the services listed above is encrypted in transit.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2 August 2026.

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at contact@vidus6.com.