Privacy Policy
Last updated: July 2, 2026
UV Report is built to need as little of your information as possible. Here's the plain-English version of how the app and this website handle your data.
The app
Your location
Your location is used for one thing: to look up the UV index where you are. It's never sold, and it's never used to track you. Prefer not to share it? You can add locations by name instead.
What stays on your device
Your saved locations, skin type, and settings live on your device — not on a server we run — and are removed when you delete the app. UV Report doesn't create accounts or profiles.
Ads
UV Report is free, supported by a single occasional ad from Google, and you can remove ads for good with a tip. To show and measure those ads, Google may use limited ad-related information. On first run — and wherever local rules require it — you'll be asked about ad tracking and consent, and your choice is respected; if you decline, ads still appear, just not personalized. Ads never show on Apple Watch, in widgets, or in Live Activities.
Analytics & crash reports
To see which features people use and to catch crashes, UV Report uses Google Firebase — anonymous usage analytics and crash reporting. It isn't tied to your identity and doesn't use the iOS advertising identifier. We also note, at a coarse country level, the places you choose to check (from your search, never from GPS) so we know which regions to support. You can turn usage analytics off any time in Settings → Privacy → "Share anonymous usage data"; outside the EEA, UK, and Switzerland crash reports are sent so we can fix bugs. In the EEA, UK, and Switzerland, both usage analytics and crash reporting follow the same consent choice as ads — decline and both are off.
Other services
Apple handles app downloads and purchases; Google provides the ads, the consent prompt, and the analytics and crash reporting described above. Each manages data under its own privacy policy.
The website
This site uses Google Analytics to understand which pages people find useful, which sets cookies in your browser. You can opt out with Google's opt-out add-on or your browser's privacy settings. The site doesn't show ads, and the app itself doesn't use any website analytics.
Purposes & legal bases (GDPR)
For users in the EEA, UK, and Switzerland, we rely on the following legal bases under Article 6 of the GDPR:
- Showing you the UV index for your location — processing your location is necessary to provide the core app functionality you request (performance of a contract / provision of the service, Art. 6(1)(b)). You can decline location access and add locations by name instead.
- Usage analytics & crash reporting (Google Firebase / Crashlytics) — consent, Art. 6(1)(a). In the EEA, UK, and Switzerland this is region-aware and is collected only after you consent through the on-device consent prompt (IAB Transparency & Consent Framework, via Google's User Messaging Platform). Analytics and crash reporting ship switched off and are enabled at runtime only once consent is given. You can withdraw consent at any time via Settings → Privacy → "Share anonymous usage data" or by re-opening "Manage privacy choices".
- Ads (Google AdMob) — consent, Art. 6(1)(a) for personalized ads and any related ad tracking, obtained region-aware through the same consent prompt. If you decline, ads still appear but are not personalized.
- Tip jar / removing ads (in-app purchases) — performance of a contract, Art. 6(1)(b). Purchases are processed by Apple.
Categories of personal data
- Approximate location — used only to look up the local UV index; not stored on our servers.
- Coarse country of places you choose to check (derived from your search, never from GPS) — to know which regions to support.
- Usage & diagnostic data — anonymous app-usage events and crash reports; not tied to your identity and not using the iOS advertising identifier.
- Ad-related information — limited information used by Google to show and measure ads, subject to your consent choice.
- Purchase data — handled by Apple to process in-app purchases.
- Website usage — standard Google Analytics measurement data on this site.
We do not create accounts or profiles, and your saved locations, skin type, and settings stay on your device.
Recipients
We share personal data only with the service providers needed to run UV Report, each acting under its own privacy policy:
- Apple — app downloads and in-app purchases (privacy policy).
- Google — Firebase Analytics and Crashlytics (usage analytics and crash reporting) and AdMob (ads) in the app (privacy policy).
- Google Analytics — website usage measurement on uvreport.app (privacy policy).
- Cloudflare — hosting and delivery of this website (privacy policy).
International transfers
These providers are based in, and may process data in, the United States and other countries. Where personal data of EEA, UK, or Swiss users is transferred outside your region, those transfers are covered by the providers' own safeguards, such as the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
Retention
We do not keep a copy of your personal data on our own servers. Your saved locations, skin type, and settings persist on your device until you delete the app. Analytics and crash data are retained by Google according to the retention period configured for our Google Analytics property. Purchase records are retained by Apple under its policies. Website analytics are retained per our Google Analytics property configuration.
Your rights
Depending on where you live, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time (withdrawal does not affect processing carried out before withdrawal). To exercise any of these rights, email us at support@uvreport.app and we'll help. You can withdraw consent for analytics, crash reporting, and personalized ads directly in the app as described above.
If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with a supervisory authority. In the EEA you can contact your local data protection authority (a list is available via the European Data Protection Board); in the UK you can contact the Information Commissioner's Office (ICO).
Other important points
- Providing personal data is optional. There is no statutory or contractual obligation to provide it; the only consequence of declining is that the related optional feature (such as personalized ads, analytics, or location-based lookup) won't be available.
- We obtain personal data only directly from you, not from third-party sources.
- We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 of the GDPR.
The basics
- We don't sell your personal information.
- UV Report isn't intended for children under 13.
- Depending on where you live, you may be able to see, correct, or delete the information held about you, or object to certain uses — just email us and we'll help.
Contact
UV Report is operated by Embay, LLC, a limited liability company registered in Florida, USA. For the purposes of the EU GDPR and the UK GDPR, Embay, LLC is the data controller for personal data processed through the UV Report app and the uvreport.app website. We have not appointed a Data Protection Officer, and given the scale and nature of our processing we are not required to.
For any privacy question, or to exercise your rights, contact the data controller: Embay, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States — support@uvreport.app.
We may update this policy from time to time; the date above shows the latest version. Questions? Email us.