Privacy Policy

Last updated: March 27, 2026

1. Introduction

Sola ("we", "our", "us") is a vitamin D tracking mobile application operated by Vernon Family (Pty) Ltd. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Sola application and related services (collectively, the "Service").

By using Sola, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Account Information

• Name
• Email address
• Date of birth

Health Data

• Skin type and melanin level (determined via skin tone scan)
• Weight
• Vitamin D levels (lab results you enter manually)
• Supplement logs (type, dosage, frequency)
• Sun session history (duration, UV exposure)
• Symptom check-ins

Location Data

• City and country
• Latitude and longitude (used to retrieve local UV index and weather data)

Usage Data

• App interactions and feature usage
• Device information (operating system, device model)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide personalised vitamin D recommendations based on your skin type, location, and health profile
• To calculate safe and effective sun exposure times based on your skin tone and real-time UV conditions
• To track your vitamin D journey, including sun sessions, supplement intake, and lab results over time
• To power the Ask Sola AI assistant with your profile context, enabling personalised health guidance
• To send notifications about sun conditions, supplement reminders, and seasonal alerts (if you have enabled notifications)
• To improve, maintain, and develop our services

4. Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it:

• Cloud Storage: Your data is stored securely using Supabase, a cloud database platform that provides encryption at rest and in transit
• Local Caching: Certain data is cached locally on your device via AsyncStorage to enable offline functionality and improve performance
• Row-Level Security: We enforce row-level security policies in our database, ensuring that you can only access your own data
• Encrypted Communications: All API communications between the app and our servers are encrypted via HTTPS/TLS

5. Third-Party Services

Sola uses the following third-party services to provide and improve the Service. Each service receives only the data necessary for its function:

• Supabase — Database hosting and user authentication. Your account data and health information are stored on Supabase infrastructure.
• OpenAI — Powers the Ask Sola AI assistant. When you use Ask Sola, your messages and relevant profile context are sent to OpenAI for processing. Please review OpenAI's Privacy Policy for details on how they handle data.
• Open-Meteo — Provides weather and UV data. No personal data is shared with Open-Meteo; only general location coordinates are used in API requests.
• OpenUV — Provides UV index data. Only your geographic coordinates are shared to retrieve local UV conditions.
• RevenueCat — Manages subscription billing and entitlements. RevenueCat receives your anonymised user ID and purchase information.
• Resend — Handles transactional emails (e.g., account verification, password resets). Your email address is shared with Resend for this purpose.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can view all of your data directly within the app at any time, including your profile, health records, session history, and lab results.
• Correction: You can update your profile information, health data, and preferences at any time through the Settings screen in the app.
• Deletion: You can permanently delete your account and all associated data by navigating to Settings and selecting "Delete Account". This action is irreversible.
• Export: You may request a full export of your personal data by contacting us at hello@solahealth.app.
• Withdraw Consent: You can withdraw your consent to data processing at any time by discontinuing use of the app and deleting your account.

7. Health Disclaimer

Sola provides general wellness information and personalised recommendations based on your profile and publicly available health science. Please be aware of the following:

• Sola is not a medical device and does not provide medical advice, diagnosis, or treatment.
• The recommendations provided by Sola are for informational and educational purposes only.
• Always consult a qualified healthcare professional before making decisions about your health, vitamin D supplementation, or sun exposure practices.
• The Ask Sola AI assistant is powered by artificial intelligence and is intended for informational purposes only. Its responses should not be considered medical advice.

8. Children's Privacy

Sola is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@solahealth.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you via email (if you have an account) or through an in-app notification.

We encourage you to review this policy periodically. Your continued use of Sola after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@solahealth.app
• Website: solahealth.app