Last updated: 8 June 2026
EnduraSun helps outdoor and endurance athletes manage sun exposure. This policy explains what personal information the app collects, why, who it is shared with, and the choices and rights you have. We have written it to be read, not skimmed past.
EnduraSun (“we”, “us”, “the app”) is operated by Conor McElgunn, a sole trader based in the United Kingdom, who is the “data controller” responsible for your personal data under the UK GDPR and the Data Protection Act 2018.
For any privacy question or request, contact us at info@endurasun.com.
When you create an account we collect your email address, and a name if you choose to provide one. Authentication (your login and password) is handled by our hosting provider, Supabase; we do not store your password ourselves.
To show the UV index and weather where you are, the app uses your device’s precise location (GPS), or a place name you search for manually. Your coordinates are used to request a forecast and may be saved to your profile so the app works the next time you open it. You can decline location access and enter conditions manually instead.
To estimate how your skin responds to the sun, the app collects the answers you give in the skin assessment (such as skin tone and how your skin reacts to sun), your resulting personal sun‑tolerance estimate, and the sessions you log — including duration, the sun strength, the sun protection used, the activity, and whether you noted any skin reaction. Because this relates to your skin and health, we treat it as sensitive and process it only to provide the app’s features, on the basis of your explicit consent (given by choosing to use these features).
If you enable them, the app schedules reminders and sun alerts. These are generated on your device; enabling them records your preference and notification permission.
Basic information necessary for the app and our hosting provider to operate (such as a user identifier and timestamps) is processed as part of delivering the service. We do not use third‑party analytics or advertising software.
We do not use your information to build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects about you.
We do not sell your personal data and we do not share it for advertising. We use a small number of service providers who process data on our behalf:
We may also disclose information if required by law, or to protect our rights or the safety of others.
Where a provider stores or processes data outside the UK, we rely on appropriate safeguards (such as the UK’s International Data Transfer Agreement or Standard Contractual Clauses, or an adequacy decision) to protect your information. If your Supabase region is outside the UK/EEA, keep this section; otherwise it may be removed.
We keep your account and associated data for as long as your account is active. When you delete your account, your profile and logged sessions are deleted from our systems. Some information held on your own device is removed when you reset the app or delete it. Backups, where they exist, are overwritten on a rolling basis.
Under UK data protection law you have the right to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent at any time. To exercise any of these, email info@endurasun.com. We will respond within one month.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.
You can delete your account and all associated data at any time from within the app, on the Profile screen (“Delete my account”). This removes your profile, your logged sessions and your sign‑in account from our systems. You can also ask us to do this by emailing info@endurasun.com.
EnduraSun is not directed at children and is intended for users aged 16 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Access to your stored data is restricted to your own account, and sign‑in is handled by our hosting provider using industry‑standard measures. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.
EnduraSun provides general estimates to help you manage sun exposure. It is not a medical device and does not provide medical advice. Estimates such as burn times and your sun‑tolerance figure are guides, not guarantees — UV can damage skin even without a visible burn. Always use sun protection and seek advice from a qualified professional for any medical concern.
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.