SunSeat Privacy Policy
SunSeat tells you which side of a plane or coach to sit on, based on where the sun will be along your route. This page explains exactly what the app stores, what it sends, and what it never touches.
Last updated: 26 August 2026
The short version
- You can use SunSeat without giving us your name or email.
- We never ask for your device's location.
- There are no adverts, no analytics, no tracking, and no third-party SDKs in the app.
- We do not sell or share your data with anyone for marketing.
- You can delete your account and everything in it from inside the app.
What SunSeat stores on your phone
- A random device identifier. The first time you open the app it generates a random string and keeps it on your phone. This is how your saved trips stay yours without an account. It is not your device's hardware ID, advertising ID, or anything Apple assigns.
- Sign-in tokens, so you do not have to sign in every time.
- Recent searches and recently used stops, to save you typing.
- Your appearance choice (light, dark, or follow the system) and whether you have seen the intro.
All of this stays on your phone. Deleting the app removes it.
What we store on our servers
- Your account. If you create one: your email address, your password (stored only as a bcrypt hash — we never see or keep the password itself), and a display name if you choose to give one. If you do not create an account, we store only the random device identifier described above.
- Your saved trips. The departure and arrival stops you picked, the departure date and time, the vehicle type if you set one, and a flight number if you entered one.
- Sign-in tokens, so your session can be renewed. These are revoked when you sign out or change your password.
Looking up a seat suggestion without saving it does not create any record tied to you. It does increment one anonymous counter, described next.
Anonymous route counts
Each time any traveller looks up a route, we add one to a counter for that pair of stops — for example "IST to LHR, 412 lookups". This is what fills the popular routes list in the app. The counter holds only the two stop codes, the transport mode, a number, and when it was last touched. It carries no user identifier, no device identifier, and no per-person timestamps, so it cannot be traced back to you or used to reconstruct what you searched for.
What we never collect
- Your device's location. SunSeat has no location permission and never requests one. The stops used for a suggestion are the ones you type in.
- Your contacts, photos, calendar, microphone, or camera.
- Advertising identifiers, or any cross-app or cross-site tracking.
- Analytics or crash-reporting data. The app contains no analytics SDK.
Reminders
If you save a trip and allow notifications, SunSeat schedules a reminder on your phone for the day before you travel. These are local notifications, created and delivered entirely by your device. Nothing is sent to a push notification service, and we cannot see them. Declining the permission simply means no reminder; the rest of the app works normally.
Services our server contacts
To work out a suggestion, our server queries two outside services. Your account details are never included in these requests.
- Open-Meteo — receives the coordinates of points along the route you looked up, and the date, to return the expected cloud cover. It receives no identifier and nothing that links the request to you.
- OSRM — for coach journeys, receives the coordinates of your two chosen stops in order to return the road route between them. It receives no identifier.
Where your data is held
Our application server runs at Hetzner in Germany. Our database is a managed MySQL instance hosted by DigitalOcean in Frankfurt, Germany. Both are inside the European Union. Traffic between the app and our server is encrypted with HTTPS.
How long we keep it
We keep your account and trips until you delete them. Deleting a trip removes it immediately. Deleting your account removes the account, every trip attached to it, and all of its sign-in tokens; this cannot be undone. Server logs that may contain IP addresses are kept for a short period for security and troubleshooting.
Your choices
- Change your name — Account → tap your name → Your name.
- Change your password — Account → tap your name → Password.
- Delete a single trip — Trips → swipe or tap the trip → Remove.
- Delete your account and all your data — Account → tap your name → Delete account. Confirmed with your password, and immediate.
- Turn reminders off — iOS Settings → SunSeat → Notifications.
If you are in the EU or UK, you also have the right to ask for a copy of your data, to have it corrected, or to have it erased. Most of this you can do yourself with the controls above; for anything else, write to us at the address below and we will respond within 30 days.
Children
SunSeat is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change what we collect or who we send it to, we will update this page and change the date at the top. Significant changes will also be noted in the app.
Contact
Questions about this policy, or about your data: PUT-YOUR-SUPPORT-EMAIL-HERE