Privacy Policy UVSeQure App
Language notice. This Privacy Policy is provided in English for convenience. The Dutch version (Privacyverklaring) is the authoritative version. In the event of any conflict or inconsistency between the Dutch and English versions, the Dutch version prevails.
Effective date: June 10, 2026 Last updated: July 2, 2026
This Privacy Policy describes how Weitzel Advies ("we", "us", "UVSeQure") processes personal data when you use the UVSeQure mobile application (the "App"). It is designed to comply with the General Data Protection Regulation (Regulation (EU) 2016/679 — the "GDPR"), the Dutch GDPR Implementation Act (UAVG) and the Dutch Telecommunications Act (Telecommunicatiewet).
This Policy must be read together with the Terms and Conditions and the in-app medical Disclaimer (shown on first launch, accessible at any time via Settings). UVSeQure is an informational tool based on our own interpretation of publicly available scientific literature on UV radiation and sun protection; it does not provide medical advice, diagnosis or treatment and is not a medical device within the meaning of Regulation (EU) 2017/745.
The App's starting point is simple: your data stays on your device. We do not store any profile, location or usage data on our servers.
1. Who we are
The controller (Art. 4(7) GDPR) is:
- Name: Weitzel Advies
- Legal form: sole proprietorship
- Website: https://uvsequre.com
- Chamber of Commerce (KvK) number: 56031254
- VAT number: NL001904225B08
- Email for privacy enquiries: privacy@uvsequre.com
We have not appointed a Data Protection Officer; our processing does not meet the thresholds of Article 37 GDPR.
2. What we do not do
- We store no personal data about you on our servers.
- We do not sell personal data.
- We do not share data with advertisers and the App contains no advertising SDKs.
- We do not track you across other apps or websites.
- We do not use your data to train AI models.
- We do not collect special categories of personal data within the meaning of Article 9 GDPR. The Fitzpatrick phototype you provide is not treated as health data; it is a behavioural classification of how your skin reacts to sunlight, not a medical diagnosis, and is used solely to calibrate informational sun-protection advice.
3. What data we process
Profile data (on your device only): Fitzpatrick phototype (I–VI), date of birth, gender, preferred SPF level, selected city or the "use my location" preference, default activity, language preference and your acceptance of the in-app Disclaimer. This data is stored exclusively locally on your device. We have no access to it and keep no copy of it.
Request data (transient): when you request a recommendation or start a reapplication timer, the App sends the necessary profile data and your location (your GPS position or the position of the city you have selected) once to our server. This data is used solely to retrieve the local UV index and calculate the recommendation, and is not stored or logged; once the response has been calculated, it is gone. We keep no history of your recommendations, locations or timers. The timer itself and any reminders run entirely on your own device.
Technical data: we use your IP address briefly to prevent abuse, for example too many requests in a short time; we do not store it permanently. Technical characteristics sent with every internet request (such as App version) are used only to handle the request and are not retained.
Error reports (anonymous): to keep the App reliable, we use the error-logging service Sentry (§5). If a technical error occurs in the App or on our server, a report is recorded with technical information about the error (such as the error message, the affected part of the software, App version, operating-system version and device model). These reports contain no profile data, no precise location (such as latitude/longitude) and no identifiers that link the report to you or your device.
Sending profile data with a request is necessary in order to calculate a recommendation; without this data we cannot provide one.
4. Purposes and legal bases
| # | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| 4.1 | Generating SPF / reapplication recommendations based on the data sent with the request | Contract — Art. 6(1)(b) |
| 4.2 | Securing the service (preventing abuse, such as too many requests in a short time, on the basis of your IP address) | Legitimate interest — Art. 6(1)(f). Our interest in keeping the service available and secure outweighs the limited intrusion of brief IP use, which is not stored permanently and contains no special categories. |
| 4.3 | Complying with legal obligations (lawful requests from authorities) | Legal obligation — Art. 6(1)(c) |
| 4.4 | Keeping the App reliable (anonymous error reports when a technical fault occurs) | Legitimate interest — Art. 6(1)(f). The reports contain no data traceable to you (§3). |
We do not rely on Article 9 GDPR, because we do not process any special categories (§2).
5. With whom we share data
We share data only with the parties listed below, and only to the extent necessary to provide the service. A data processing agreement (or equivalent contractual safeguards) is in place with each of them.
| Recipient | Function |
|---|---|
| Render.com (Frankfurt region, EU) | Our hosting provider; this is where our server runs that calculates recommendations. No personal data about you is stored on it. |
| OpenWeatherMap (UK) | Provides the UV index for your location. We send only the location; no profile data. |
| Expo (Expo, Inc., USA) | Provides the tools we use to build the App and delivers app updates. When fetching an update, Expo briefly processes technical data such as your IP address. |
| Sentry (Functional Software, Inc., USA) | Error logging. Receives anonymous technical reports about errors in the App or on our server, so that we can fix problems. |
We update this list when processors change; material changes are announced as described in §14.
6. International transfers
Our server is located within the EU. The United Kingdom is covered by an adequacy decision of the European Commission, meaning that data may be transferred there at the same level of protection as within the EU. For the technical processing by Expo and Sentry in the United States, we rely on the EU-U.S. Data Privacy Framework (Adequacy Decision (EU) 2023/1795) where the recipient is certified under it, and additionally or alternatively on the Standard Contractual Clauses of the European Commission (Decision (EU) 2021/914). All communication is encrypted in transit.
7. Retention periods
| Data | Retention period |
|---|---|
| Profile data | Only on your own device; deleted as soon as you delete the App or the App's data |
| Request data (profile and location sent with a recommendation request) | Not retained; processed only while handling the request |
| IP address | Briefly, solely for abuse prevention; not stored permanently |
| Error reports | Anonymous; retained by our error-logging service for a limited period (at most 90 days) and then deleted automatically |
8. Your rights
Pursuant to the GDPR (Arts. 15–22 and 77) you have the right to access, rectification, erasure, restriction, data portability, objection, withdrawal of consent and lodging a complaint with the supervisory authority.
Because we store no personal data about you, there is as a rule nothing on our side to access, correct or delete: your data exists exclusively on your own device and is entirely under your own control.
- View and correct: view and change your profile data in the App via Settings.
- Delete: delete the App from your device; this deletes all of your data.
- Other requests or questions: send an email to privacy@uvsequre.com describing which right you wish to exercise.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Art. 77 GDPR): https://autoriteitpersoonsgegevens.nl.
9. No automated decision-making
We do not carry out any automated decision-making that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
The SPF-interval algorithm produces non-binding informational advice based on our own interpretation of publicly available scientific literature. It is not a medical diagnosis, prognosis or treatment decision, not a substitute for advice from a doctor or dermatologist, and does not determine your access to any service or contract. Personalisation is limited to data you yourself voluntarily provide (Fitzpatrick phototype, age, activity, SPF preference, location). See the in-app Disclaimer and the Terms and Conditions for the full scope.
10. Children's data
The minimum age to use UVSeQure is 16, in line with Article 5 of the Dutch GDPR Implementation Act (UAVG) and Article 8 GDPR. Because we store no data about users, we cannot verify users' ages; when starting to use the App, users declare that they are 16 or older, or that they are acting with the demonstrable consent of a legal representative. Parents or guardians may contact us at privacy@uvsequre.com.
11. Reminders (local notifications)
Reapplication reminders are scheduled entirely on your own device as local notifications. No data is sent to us or to third parties for this purpose, and no push token or device identifier is registered with us.
You can disable notifications at any time via your operating system settings or in the App via Settings. We do not use notifications for marketing.
12. Storage on your device
The App stores data locally on your device that is strictly necessary for the App to function: your profile data (such as skin type, date of birth, gender and preferences), your language preference, running timers and the fact that you have accepted the Disclaimer. This is permitted without separate consent under Article 11.7a(3)(b) of the Dutch Telecommunications Act, because this storage serves solely to provide the service you have requested. We do not place cookies and do not engage in non-essential storage such as tracking pixels or analytics identifiers.
13. Security measures
We take appropriate technical and organisational measures to protect data. All communication between the App and our server is encrypted. The data you send with a request is processed in memory only and is not logged or stored; only in the event of a technical error is an anonymous error report recorded (§3). We limit the number of requests per user to prevent abuse and keep our software regularly updated with security patches.
14. Changes to this Privacy Policy
With each change, we update the "Last updated" date at the top. For material changes (new categories of data, new processors involving international transfers, new purposes or changes to your rights) we will inform you in advance via an in-app message. Processing that requires consent will continue to require a new act of consent.
15. Contact and complaints
For privacy questions, requests or complaints:
- Email: privacy@uvsequre.com
- Website: https://uvsequre.com
You also have the right to lodge a complaint with the Dutch supervisory authority:
- Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
- Website: https://autoriteitpersoonsgegevens.nl
- Postal address: Postbus 93374, 2509 AJ Den Haag, the Netherlands
- Telephone: +31 (0)88 1805 250
See also: Terms and Conditions and the in-app medical Disclaimer.