Privacy Policy

Effective October 13, 2026

Who we are

Sunroom is an iPhone app and a website (trysunroom.com) run by Brandon Marquart ("we", "us"), based in Colorado, USA. We decide how your data is used, so under EU and UK law we are the "controller" of it.

Questions about your data, or a request about it: support@trysunroom.com. We read every message.

What we collect

Your account

A temporary account while you set up

The first steps run on a temporary account with no email. If you leave without creating an account, the temporary account and everything in it is deleted after about an hour of not being used.

Your rooms and plants

Photos and scan notes

Premium and plan limits

How the app is used (analytics)

PostHog records which screens you open and what you do in them, for example finishing setup, watering a plant, or opening or closing the Premium page. It also records broad facts about your account (Premium or not, reminders on or off, roughly how many plants you have) plus your device type, system version, language and app version.

This is tied to your random account ID, not your name or email. We turned off PostHog’s location lookup, so it doesn’t work out where you are from your IP address. We use it only to see which parts of Sunroom work and to improve them, including testing two versions of a screen to see which helps more people.

Crash and error reports (diagnostics)

When the app crashes or something fails, we get a report: the error, where in the app it happened, your device type and system version, the app version, and the state of the app at the time (such as free memory and storage). We use these only to find and fix problems.

Messages you send us

If you email us, through Send feedback in the app or otherwise, we receive your email address, your message and anything you attach. The app adds only the app version to the subject line.

Our website (trysunroom.com)

What we don’t collect

We don’t collect your location, contacts, health data, browsing history or advertising identifier. Reminders are scheduled on your phone, so we don’t use push notification tokens. The app has no ads and no ad or tracking SDKs, and it never shows Apple’s "Allow tracking?" prompt because it doesn’t track you.

How we use it, and why we’re allowed to

We don’t sell your personal information. We don’t "share" it for cross-context behavioral advertising (as California law defines it), use it for targeted ads, or use it to track you across other companies’ apps or websites. We don’t make decisions about you that have legal or similarly significant effects based only on automated processing. The AI only suggests a likely plant name or a likely cause of a problem.

AI features

When you identify a plant or run a health scan, the photo goes to Anthropic, which runs the Claude AI model for us. For a health scan we also send the plant’s details: its type and nickname, its spot, your room’s light, humidity and window directions, its recent care, how long it’s been in Sunroom, the month, and any symptoms or note you add. We don’t send your name, email or account ID.

Anthropic uses this only to produce your answer. Under its commercial terms it can’t train its models on this data. It may keep it for a short time, for example to check for misuse, as described in its privacy policy.

Before your first scan or photo ID, the app asks whether you agree. Nothing is sent to Anthropic unless you do. You can withdraw consent at any time by not using those features, or by emailing us to reset it.

Who else handles your data

These providers handle data for us, only to provide their service to Sunroom, under contracts that protect it:

We may also disclose data if the law requires it, to protect people’s safety or our rights, or as part of a sale or reorganization of Sunroom. In that last case we’d tell you first, and this policy would keep applying to your data.

Where your data is stored

Sunroom and our providers are based in the United States, and your data is stored and processed there. If you live in the EU, UK or Switzerland, we rely on the safeguards the law provides for these transfers: the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or the European Commission’s Standard Contractual Clauses.

How long we keep it

Deleting your account

In the app, open Account → Delete account. We ask for your password (or Apple sign-in) once more. Then, straight away, we delete your account details, rooms, furniture, plants, care history, scans and their results, photos, usage counts and sign-in, and ask RevenueCat to delete your subscription record. If you signed in with Apple, we also revoke Sunroom’s access to your Apple ID. Reminders are cleared from your phone.

Deleting your account doesn’t cancel an App Store subscription. Cancel it in Settings on your iPhone: tap your name, then Subscriptions.

Analytics and crash reports aren’t linked to your name or email, so they aren’t removed instantly. They expire as shown above. To have them removed sooner, email us. If you can’t sign in, email us from the address on your account and we’ll delete it for you.

Your choices and rights

Wherever you live, you can:

EU, UK and similar laws. You have the right to access, correct, delete, restrict or move (port) your data, to object to processing based on our legitimate interests (including analytics), and to withdraw consent at any time without affecting what happened before. You can also complain to your local data protection authority, though we’d like the chance to help first.

California and other US states. You have the right to know what personal information we collect and how we use and disclose it, to get a copy, to correct it, and to delete it. In the last 12 months we collected these categories: identifiers (email, account ID, installation ID), commercial information (subscription status), internet or other electronic activity (how the app is used), and other information you give us (photos, plants, notes). We don’t sell or share it as California law defines those words, and we don’t use sensitive personal information. We won’t treat you differently for using your rights. You can use an authorized agent; we may need to check your identity, and theirs, by email.

We answer requests within 30 days (45 days where California law allows). There’s no charge.

Children

Sunroom isn’t meant for children under 13, and we don’t knowingly collect their data. In the EU and UK, if you’re under the age your country sets for consenting to online services (between 13 and 16), please use Sunroom with a parent’s permission. If you think a child has given us data, email support@trysunroom.com and we’ll delete it.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Our database and photo storage rules let each account reach only its own data, and our server checks that requests come from the real Sunroom app. No system is perfectly secure, but we take reasonable steps to protect your data, and we’ll tell you and the authorities about a breach when the law requires it.

Changes to this policy

If we change this policy in a meaningful way, we’ll update the effective date and ask you to accept it again in the app before you carry on. Earlier versions are available on request.

Contact

Brandon Marquart, Sunroom

support@trysunroom.com

https://trysunroom.com/privacy