Your data

Privacy policy

Suntilea offers small daily challenges. You can use the app without providing your name or email address.

Effective date: September 14, 2026. Publisher and data contact: Suntilea Studio · suntilea.support@proton.me.

Data stored on your device

The app stores downloaded challenge packs, your challenge progress, pending completions, language and reminder preferences. It creates a random player identifier and a secret credential to authenticate synchronization. On Android and iOS, that credential is stored using the operating system's secure storage facilities.

Data sent to our service

To synchronize successful challenges, the app sends the random player identifier, your initial time zone, and completion records: challenge and pack identifiers, theme, challenge day, and reveal and completion times. Our database stores these records, the player's creation time and a hash of the authentication credential. The credential is transmitted over HTTPS for authentication.

We use these data to deliver challenge packs, authenticate your device, validate completions and maintain successful challenge history. The identifier is pseudonymous: it distinguishes an installation even though we do not ask for your name.

Optional Google sign-in and cloud progress

On Android versions with Google sign-in enabled, you may link your progress to a Google account to restore it after reinstalling or on another device. Guest mode remains available without Google sign-in. Google processes authentication and may provide basic profile information to its sign-in SDK. Suntilea verifies the identity token and stores the stable Google account identifier, a Suntilea account identifier, the account time zone, linked installation identifiers, and challenge reveal and completion records in Cloudflare D1. We use these records to restore progress, resolve duplicate challenge days and count linked accounts. Google sign-in alone does not store email addresses. We do not store names, profile photos or Google access/refresh tokens in our account database, and we do not request access to Drive, contacts or other Google content.

Progress synchronizes on opening or returning to the app, after actions and when you request it in Settings. Actions made offline stay on the device until synchronization succeeds. Only synchronized progress can be restored after loss of local data. Devices signed in to the same account share progress; signing out starts a fresh guest profile on that device and keeps the cloud backup.

Hosting and technical information

Cloudflare hosts the API, these pages and the database. It processes network information, including IP addresses and request metadata, to deliver and protect the service. Technical data may also be handled according to Cloudflare's service and security settings. We do not intentionally log authentication credentials or challenge event payloads.

We do not sell your data or use it for advertising. This version does not integrate advertising or third-party behavioral analytics. These pages do not use analytics cookies or tracking scripts. If you choose a display language on the tester signup page, your browser stores that preference locally.

Notifications and permissions

Reminders are scheduled locally on your device when you enable notifications. You can disable them in the app or your phone's settings. Suntilea does not request access to your contacts, precise location, microphone, camera or health records to provide daily challenges.

Support correspondence

If you email us, we receive your email address and the information you choose to send. We use it to answer your request. Your email provider and our mailbox provider process that correspondence. Please do not send passwords, authentication credentials or sensitive health information.

Tester recruitment

If you join our Android tester waitlist, we store your Google Play email address, country, preferred contact language, signup time and agreement version in Cloudflare D1. We use these details with your agreement to organize the test, grant Google Play access and contact you about testing. Access is restricted to the owner and authorized recruitment coordinator; we do not use the list for unrelated marketing. Cloudflare Turnstile processes technical browser information to protect the form against automated submissions. Signup records are removed after 90 days by a daily cleanup. You can withdraw and request earlier deletion by contacting us.

Invitations to future Suntilea Studio app tests

This separate, optional subscription is available in app Settings after Google sign-in. Nothing is subscribed automatically. If you explicitly subscribe, we store your chosen contact email, language, Suntilea account reference, source app, agreement version and agreement date in Cloudflare D1. The Google email may be offered locally as an editable suggestion; it is not saved merely by signing in. We use this list only for occasional invitations to test future Suntilea Studio apps, not commercial offers. Contact addresses are user-provided and are not independently verified. Only the owner and authorized recruitment coordinator may access them.

Your subscription expires after one year. Expired entries are excluded from exports and removed by daily cleanup. Unsubscribe in Settings or contact support at any time. Unsubscribing deletes the contact entry; deleting your Suntilea account also deletes it. Signup does not send an automatic email. Existing Suntilea tester waitlist entries are not copied into this list.

Retention and deletion

Device data remains until you clear the app's storage or remove the app, subject to your operating system's backup and secure-storage behavior. Removing the app does not automatically delete synchronized server records. Player and completion records currently have no automatic expiry. Support correspondence is kept while handling your request and any necessary follow-up; no automatic mailbox deletion schedule is currently configured.

Contact suntilea.support@proton.me to request access, correction or deletion of data, or ask about retention. Contact us before removing the app if your request concerns synchronized progress: an email address alone cannot identify a randomly generated player record. We may need your help to identify the installation and verify the request. Never send your secret credential.

For a linked Google account, use Settings → Delete account and progress to remove your Suntilea cloud account and its saved progress. This revokes linked installation credentials and removes imported completion records; it does not delete your Google account. Removing the app alone does not delete the cloud account. You may also contact support through the public support page to request account deletion; we will verify ownership before acting. Never send passwords or authentication tokens.

Deleted records may remain temporarily in existing backups until those backups expire. Anonymous device-local progress cannot currently be restored through an email address after loss of app data.

Your choices and rights

You can use downloaded challenges offline; pending completions are sent when synchronization succeeds after reconnection. Depending on applicable law, you may have rights to access, correct, delete or restrict use of your personal data, object to processing, obtain a copy, or complain to your local data protection authority. Contact us to exercise these rights or ask questions.

Changes

We will update this page and its effective date when our data practices change. This policy describes the current Suntilea application and support pages.