Privacy Policy

Sunn (“we”, “us”, or “our”) operates the AI nutrition coaching service available at sunn.app and via WhatsApp. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.

By using Sunn, you agree to the collection and use of information in accordance with this policy.

1. Data We Collect

We collect the following categories of personal data:

• Account information: email address, phone number, and name provided during registration or quiz completion.
• Quiz answers: responses to our onboarding quiz including dietary preferences, goals, activity level, and health-related information you choose to share.
• WhatsApp messages: text messages and food photos you send to your Sunn coach via WhatsApp, used to provide coaching and food analysis.
• Nutrition data: food logs, calorie and macro estimates, daily summaries, and progress data generated through the service.
• Payment information: billing details processed securely by Stripe. We do not store your full credit card number on our servers.
• Usage data: device type, browser information, and interaction patterns to improve service quality.

2. How We Use Your Data

Your data is used to:

• Provide personalized AI nutrition coaching, including food photo analysis and macro tracking.
• Generate tailored meal suggestions, daily summaries, and progress reports.
• Improve our AI models and coaching quality based on aggregate, anonymized usage patterns.
• Process payments and manage your subscription.
• Send service-related communications (e.g., account activation, billing updates).
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Third-Party Services

We share data with the following third-party providers, strictly as necessary to operate the service:

• Stripe — payment processing. Stripe handles your credit card and billing information under their own privacy policy.
• Meta / WhatsApp — messaging platform. Messages you send to Sunn are transmitted via WhatsApp's infrastructure.
• Anthropic (Claude) — AI analysis. Your food photos and messages are processed by Anthropic's Claude AI to provide coaching responses and nutrition analysis.
• Supabase — database hosting. Your account data, nutrition logs, and coaching history are stored securely on Supabase.
• Vercel — web hosting. Our website and web application are hosted on Vercel.
• Railway — server infrastructure. Our backend services run on Railway.

Each third-party provider processes your data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

4. Data Retention

We retain your account data, nutrition logs, and coaching history for as long as your subscription is active. If you cancel your subscription, your data is retained for 30 days to allow for reactivation, after which it is scheduled for deletion.

You may request deletion of your data at any time by contacting us at privacy@sunn.app. We will process deletion requests within 30 days.

Some data may be retained longer where required by law (e.g., billing records for tax compliance).

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Norway, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data (“right to be forgotten”).
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing of your data for specific purposes.
• Right to restrict processing: request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@sunn.app. We will respond within 30 days.

6. Cookies and Local Storage

Sunn uses minimal cookies and browser storage. Specifically:

• Stripe session cookies: used during the checkout process to securely handle payment.
• Quiz progress (localStorage): your quiz answers are stored locally in your browser so you can resume if you navigate away. This data never leaves your device unless you complete the quiz.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), encrypted database connections, and access controls limiting data access to authorized personnel only.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Age Restriction

Sunn is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will promptly delete it. If you believe a minor has provided us with personal data, please contact us at privacy@sunn.app.

9. Health Disclaimer

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of Sunn after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

privacy@sunn.app