Privacy Policy

Effective date: September 24, 2026

Good Morning Sunshine! LLC ("we," "us") makes the Good Morning Sunshine app. Good Morning Sunshine is built privacy-first: your wellness data lives on your device, not on our servers. This Privacy Policy explains what information the App handles, how it is used, and the choices you have.

1. The Short Version

• Your health data stays on your device. It only leaves if you choose to export or share it, or if your device's own backup (such as iCloud) includes it. Good Morning Sunshine has no cloud service of its own.
• We do not require an account, and we do not operate servers that collect your personal health information.
• We do not sell your data. We do not show ads. We don't use advertising or analytics SDKs.
• Supplement lookups send only the barcode you scan or type (and the chosen product's database ID) to a public U.S. government database (NIH DSLD).
• Subscriptions are managed through RevenueCat using an anonymous app user ID; no health data is sent. Section 5 lists the services the App connects to.

2. Information Stored on Your Device

When you use the App, the following information is stored in a local database on your device:

• Supplements and medications you add, including dosage, schedule, and inventory.
• Intake logs (what you marked as taken and when).
• Daily check-in responses (mood, energy, sleep, and similar self-reported entries).
• Wellness goals and progress.
• Optional health profile details you choose to enter (such as allergies, conditions, and emergency contacts).
• App settings and preferences.

Your health data (supplements, medications, check-ins, and health profile) is stored on your device. It only leaves your device if you choose to export or share it (for example, a PDF, CSV, or backup file you send), or if your device's own backup — such as iCloud Backup — includes app data under your device settings. On Android, Good Morning Sunshine opts out of automatic cloud backup.

3. Information We Do NOT Collect

Because the App has no accounts and no backend of ours, we never receive your name, email address, health data, check-ins, or location, unless you choose to contact us (for example, by emailing support). Deleting the App deletes your local data.

4. Device Permissions

The App requests the following permissions, all optional:

• Camera — used only to scan supplement bottle barcodes. Images are processed on-device and are not stored or uploaded.
• Notifications — used to deliver local reminders for your supplement schedule and daily check-ins. Reminders are scheduled on your device, not from a server.
• Face ID / Biometrics— optionally used to lock the App. Biometric authentication is handled entirely by your device's operating system; the App never sees or stores your biometric data.

5. Network Requests

We don't use advertising or analytics SDKs. The app connects to these services:

• The NIH Dietary Supplement Label Database, when you scan or type a product's barcode. The barcode you scan or type is sent, and, when you pick a result, that product's database ID. No health data is sent.
• RevenueCat, Inc., to manage your subscription. It receives an anonymous app user ID and your purchase/subscription status, along with standard technical information such as platform, operating system and app version, and store country. No health data is sent. (RevenueCat privacy policy)
• Expo (EAS Update), which checks for app updates when the app starts. It receives standard technical information such as app version, platform, and runtime version, and a random installation identifier created by the update system. No health data is sent.
• Apple or Google, for app distribution and payments under their own policies.
• Links you open.When you tap a link in the App (for example, a source citation, our Terms, Privacy Policy, or support page, or your store's subscription settings), it opens in your browser, email app, or store app, under that site's or app's own policies.

Like any internet connection, these services can see your device's IP address when the App contacts them.

6. Data Export and Deletion

You are in control of your data:

• Export — Profile → Import / Export Health Data lets you generate a copy of your data (for example as a PDF) and share or save it wherever you choose.
• Delete — Profile → Delete All Data erases your local database, and deleting the App from your device removes all locally stored information.

Delete All Data and deleting the App remove the data stored in the App on this device. They don't remove copies outside the App: device backups made earlier (such as iCloud Backup), files you previously exported or shared, or the anonymous subscription record kept by Apple or Google and RevenueCat.

7. Security

Your data is protected by your device's built-in security (device passcode, encryption at rest as provided by iOS or Android). You can additionally enable the App's Face ID / biometric lock in Profile → Privacy & Security. Because your health data stays on your device unless you choose to export or share it, the most important protection is keeping your device itself secure.

8. Children's Privacy

The App is not directed at children under 16, and we do not knowingly collect information from children. Because health data stays on-device, no children's health data is transmitted to us.

9. Changes to This Policy

If we change how the App handles data — for example, if a future version adds optional cloud sync — we will update this policy, change the effective date above, and clearly surface the change in the App before any new data practices take effect.

10. Contact

Questions or concerns about privacy? Contact us at support@gmsunshine.app.