Legal
Last updated: May 14, 2026
Family SPF ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the Family SPF mobile application ("App").
With your permission, we use your device's location while you are using the App to fetch accurate, real-time UV index readings for your area from Open-Meteo. Location is used when you enable location during onboarding, refresh UV data, or open the App after UV data becomes stale.
Only your current coordinates are used for the UV lookup. We do not collect or store a location history, and we do not use your location for advertising. If location access is unavailable or denied, the App falls back to an estimated UV index based on time of day and season.
You may add family member profiles to the App, including name, age band, skin sensitivity, preferred sunscreen product, SPF rating, and reminder preferences. This data is stored locally on your device in a SQLite database. We do not have access to this data.
Timer states, UV snapshots (coordinates, UV index, place name, timestamp), selected profiles, active outdoor plans, onboarding status, and permission states are cached locally using AsyncStorage. This cached app state is not sent to our servers.
The App checks whether an iCloud account is signed in on your device. When iCloud is available, this check is used to derive a deterministic, pseudonymous App User ID for RevenueCat (see below). No personal data, including your name, email, or iCloud content, is read from or written to iCloud. If iCloud is unavailable or cannot be confirmed, purchase management and Pro access may be unavailable until iCloud is available.
We use RevenueCat to manage in-app purchases, subscriptions, lifetime purchases, trials, restores, and entitlement status. RevenueCat receives a pseudonymous App User ID derived from a one-way hash of your app-specific iCloud CloudKit record ID, plus purchase receipts from Apple, to verify your entitlements. If iCloud is unavailable or cannot be confirmed, purchase management and Pro access may be unavailable until iCloud is available. RevenueCat may also receive device and attribution identifiers such as IDFV, AppsFlyer ID, and ATT consent status so purchase events can be attributed to our own advertising campaigns. RevenueCat does not receive your name, iCloud email, or payment details; those are handled entirely by Apple. You can review RevenueCat's privacy policy at revenuecat.com/privacy.
With your permission, the App schedules sunscreen reapplication reminders locally on your device. Reminders are triggered per family member when a timer is active. We do not collect notification tokens or send remote push notifications. You can disable notifications at any time in iOS Settings.
Family SPF uses AppsFlyer to measure app installs, paid advertising campaigns, deep links, and purchase-related attribution. AppsFlyer may start without requesting App Tracking Transparency permission and may use privacy-preserving measurement methods that do not require IDFA, such as IDFV, SKAdNetwork, or aggregated reporting where available. If the App separately asks for App Tracking Transparency permission and you allow tracking, AppsFlyer may access your device's Advertising Identifier (IDFA) and use it for advertising measurement and attribution. If you decline or disable tracking, the App remains fully usable.
AppsFlyer may receive app install and app-open attribution data, device identifiers, campaign information, deep link information, and purchase or subscription events sent through RevenueCat. We use this information to understand which ads help people discover Family SPF, measure subscription and lifetime purchase performance, and reduce advertising fraud. You can review AppsFlyer's services privacy policy at appsflyer.com/legal/services-privacy-policy.
We do not collect family profile details, sunscreen timer contents, or location history for behavioral analytics. We use PostHog to understand app screens, product interactions, feature flags, app lifecycle events, and session replay. Session replay is configured to mask text inputs, images, and sandboxed views, and may include touch interactions, console logs, and network telemetry. We also use limited attribution and product interaction data through AppsFlyer and RevenueCat to measure our own advertising campaigns and purchase performance. We do not collect crash logs through a dedicated crash reporting SDK.
We use the information we collect solely to:
We do not sell or rent your personal information. We share limited data with service providers such as RevenueCat, AppsFlyer, and PostHog to operate purchases, measure our own advertising campaigns, attribute subscription and lifetime purchase events, and understand product usage. We respect your App Tracking Transparency choice; you can change tracking permission at any time in iOS Settings.
Family member profiles, timer states, and preferences are stored locally on your device. We do not operate our own servers that store this App data. Limited purchase, attribution, analytics, session replay, and device identifier data may be processed by Apple, RevenueCat, AppsFlyer, and PostHog as described in this Policy. Your locally stored data is as secure as your device.
Family SPF is designed for families and may be used to track sun safety for children. We do not knowingly collect personal information from children under 13 independently; all family member data is entered and managed by the adult using the App and remains local on the device. The App does not display advertising to users and does not send children's profile details to AppsFlyer, RevenueCat, or PostHog. If App Tracking Transparency permission is granted on the device, advertising attribution data may be used to measure our own paid campaigns, not to target children inside the App.
The App integrates with the following third-party services:
You can delete locally stored App data from the App's Delete family data option or by deleting the App from your device. You can manage location, notification, and tracking permissions in iOS Settings, including Privacy & Security → Tracking for App Tracking Transparency. To request deletion or anonymization of purchase-related, attribution, or analytics records handled by our service providers, email support@downtownlabs.dev and include your App User ID from Family → Privacy in the App. Because purchases and attribution are handled by Apple, RevenueCat, AppsFlyer, and PostHog, some records may remain with those providers as needed for receipts, fraud prevention, analytics, legal compliance, or subscription management. To cancel a subscription, use iOS Settings → Subscriptions or the customer center within the App. Apple subscription billing and purchase history are managed by Apple.
We may update this Privacy Policy from time to time. We will notify you of any significant changes via an in-app notice. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, please contact us at support@downtownlabs.dev.