Privacy policy
Last updated 25 August 2026
The short version.
- Sunblock has no accounts and no login.
- Your holiday dates, budget and preferred airport are stored on your device.
- To find prices, the app sends your airport and travel month to our own server. Nothing that identifies you goes with it.
- Booking links take you to a partner's site. From that point their privacy policy applies, and they may set cookies to record that you came from Sunblock.
- We do not sell data, show tracking adverts, or build a profile of you.
- Subscriptions are handled entirely by Apple. We never see your payment details.
This policy explains what happens to information when you use the Sunblock iOS app ("the app") and this website. It is written to meet the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
01Who we are
The app and this website are made by SVPPLY&.CO LIMITED, a private limited company registered in England and Wales, company number 11377371. For the purposes of data protection law, SVPPLY&.CO LIMITED is the data controller.
Registered office: 3rd Floor Great Titchfield House, 14–18 Great Titchfield Street, London W1W 8BD, United Kingdom.
02What information the app handles
What stays on your phone
Your blocks of time off, your preferred departure airport, your budget, and whether you'd rather rank by price or by heat are all stored on your device only. We do not operate a user database and have no way to see them. They are removed when you delete the app.
What is sent to our server
To show prices, the app asks our server (run on Cloudflare) for fares between a departure airport and a set of destinations for a given month. That request contains the airport code and the month, and nothing else about you. It does not contain your name, your exact dates, or your budget.
Like any internet request, it carries your device's IP address. Our server does not store IP addresses in anything we keep. Cloudflare, which hosts the server, keeps short-lived operational logs under its own privacy policy.
Our server also records, per airport, which destinations have ever returned a direct fare. This is aggregate route information and contains nothing about individual users.
Alerts
If you turn on alerts, the app checks fares for your blocks and notifies you when one drops. Notifications are delivered by Apple's notification service. You can turn alerts off at any time in the app or in your device's Settings.
Booking links
When you tap a booking link, the app opens the partner's website or app. That link includes a code identifying Sunblock as the referrer, so that we can be paid a commission if you book. The partner may set cookies on their site to record that referral. From that point, the partner's privacy policy applies. We do not receive your booking details, only an anonymous notice that a booking was made through our link and the commission due.
All booking links are marked AD in the app.
Subscriptions
If you subscribe to Sunblock+, the purchase is handled entirely by Apple through the App Store. We never see your name, payment card or billing address. We receive only a confirmation from your device that a subscription exists.
What the app does not do
- There is no account, sign-up or login.
- We do not ask for your name, email address or phone number.
- We do not use advertising identifiers or third-party advertising SDKs.
- We do not sell or share information with data brokers.
- We do not track you across other apps or websites.
- We do not build a profile of you or make automated decisions about you.
If you have turned on Apple's own crash and analytics sharing in your device settings, Apple may send us anonymised crash reports through App Store Connect. These tell us that something failed and where in the code, not who you are.
03Services the app connects to
| Service | What it is sent | Why |
|---|---|---|
| Our price server (Cloudflare Workers) | Departure airport code, travel month, your IP address | To return fares and direct-route availability |
| Travelpayouts (Aviasales) | Contacted by our server, not by your device, with airport and month. When you tap a flight link: your IP address and a referral code | Flight fares and, if you choose to book, a booking |
| Package holiday partners (via the Awin network) | When you tap a holiday link: your IP address and a referral code | Package holiday bookings, if you choose to book |
| Apple Maps | Map tile requests for destination imagery, handled by Apple under its own policy | Destination pictures in the app |
| Apple (App Store) | Subscription status, handled by Apple | To process and restore subscriptions |
Climate data shown in the app is bundled with it. Foreign Office travel advice is published by the UK government and reproduced under the Open Government Licence.
04This website
This website is static and served by Cloudflare. It sets no cookies and contains no analytics. Fonts are loaded from Google Fonts, which receives your IP address in the same way any web server you visit does. If you email us, we keep your email for as long as needed to answer it.
05Why we are allowed to do this
Under the UK GDPR we need a lawful basis for handling personal data. Ours is legitimate interests (Article 6(1)(f)): you have asked for fares from an airport for a month, and asking our server is the only way to answer. We use the minimum needed and store none of it against you.
Where you subscribe to Sunblock+, the lawful basis is performance of a contract (Article 6(1)(b)).
06How long anything is kept
- Your blocks, airport, budget and preferences
- On your device only, until you change them or delete the app. Never held by us.
- Fare requests
- Not stored against any user. Cached fares are held by our server keyed by airport and month, with no user information.
- Subscription status
- Held by Apple, under Apple's own retention rules.
- Emails you send us
- Kept as long as needed to deal with your query, then deleted.
07Your rights
You have the right to ask us for a copy of any personal data we hold about you, to have it corrected or deleted, to object to how we use it, and to restrict its use. In practice we hold no personal data about users of the app, so there is usually nothing for us to give you or delete. If you contact us we will tell you that plainly and explain why.
You can remove everything the app holds by deleting it from your device.
08How to complain
If you are unhappy with how we have handled your personal data, email hello@sunblocktravel.co.uk with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days and tell you the outcome.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. Complaining to the ICO is free.
09Children
Sunblock is a general audience app about travel. It is not directed at children and does not knowingly collect information from anyone. It has no accounts, no social features and no way for anyone to contact anyone else through the app.
10Changes to this policy
If we change how the app handles information, we will update this page and change the date at the top. Significant changes will be noted in the App Store release notes.
11Contact us
For anything to do with privacy or your data, email hello@sunblocktravel.co.uk.