Last updated: 26 October 2026
Unaryx ("we", "us", "our") makes Suna. This policy explains what we collect when you use the Suna iPhone app, its App Clip and widgets, and unaryx.com, why we collect it, who we share it with, and the choices you have.
1. What we collect
Your account
- Your email address. If you sign in with Apple or Google, we receive the email (or Apple's private relay address) and the name those services pass to us.
- Your username, avatar, and, if you add them, your home city and country.
Your location
- While you use the app: your precise location, to show places and events near you, sort them by distance, and let you check in at a place.
- In the background, only if you choose "Always Allow": iOS tells Suna when you are near a place you saved, so we can remind you, and when you arrive in a new country, so we can show tips for that trip.
- What we store: your last known location, the country you are in, the countries you have been in while using Suna with their dates, and the location attached to anything you post. We use these to send you nearby alerts and to tailor picks.
You can change or turn off location access at any time in iOS Settings. Suna still works without it; you choose a city instead.
What you do in Suna
- Places and events you save, hide, rate or check in to, and events you say you are going to.
- Events you're going to: if you tell Suna you have tickets for an event or mark it as going, we keep that with your account so we can remind you and plan your day around it. Only you can see it, and you can remove it at any time from the event.
- Trips and plans you make, and the people you invite to them.
- Your searches, and the questions you ask Ask Suna.
- Preferences you give us, such as categories you like and any dietary needs you add, plus a taste profile we build from what you save and skip.
- Links you paste in (for example a TikTok or Instagram post) so we can find the places in them.
What Suna remembers about you
So her suggestions fit you, Suna keeps a short profile of you:
- Travel facts you tell Ask Suna, such as how long you are staying, whether you are working or on holiday, where you are heading next, who you are travelling with, food you like, your pace, your budget level, and the passport you travel on (the country only, for visa and entry rules).
- A summary of what you already do in Suna, made each night from the places you save, like, rate, mark "Not for me" or visit, and your trips.
If you choose to share your tastes with friends, people you follow who follow you back can ask Suna what you might like: your food preferences (such as halal or vegetarian) and the places you've saved or liked. Never where you are, your trips, or anything else. You can turn this off at any time in Profile → Settings → Privacy & data.
We use it only to pick places, events and plans for you and, if you share your tastes, to answer friends who ask Suna what you'd like. It is sent to our AI provider with your questions, as described below, and is never used for ads.
Suna does not keep your health, religion, ethnicity, sexuality or politics, your home address, passport or ID numbers, or payment details, or anything about other people you mention by name.
To see what Suna remembers, ask her "What do you know about me?". To remove one thing, tell her "Forget that"; to clear it all, "Forget everything". From version 3.2.2 you can also see it, delete it or turn it off in Settings → Privacy & data. Deleting your account deletes it too.
What you share
- Photos, videos (with sound), captions, tags and tips you post, trips you publish, and feedback or reports you send us. We only use your camera, microphone and photo library when you choose to take or attach something.
Purchases
- Apple handles payment for Suna Premium. We receive the transaction ID, product and expiry date so we can unlock Premium. We never see your card details.
Device and usage
- How you use the app: screens viewed, buttons tapped, and recordings of app sessions (session replays) that show what was on screen.
- Device model, iOS version, app version, crash reports and a push notification token.
- Whether you came to Suna from an Apple Search Ad or one of our campaign links.
On unaryx.com
- Pages visited and links clicked, measured without cookies. We do not record website sessions.
- Founding Locals and the Android waitlist. If you claim a Founding Locals spot, we show the name you choose on unaryx.com/kl/founding-locals, and nothing else about you. If you join the Android waitlist, we keep your email and city only to tell you when Suna is on Android. You can remove yourself from either list at any time by emailing hello@unaryx.com or using the link in our email.
- Listing an event. If you send us an event through unaryx.com/events/list, we check it and then publish the event details and photo you give us. We keep your contact email separately, and only our team can see it. We use it only about that event: to tell you when it's live and, while it has visitors, to send you a weekly email with how its page is doing (views, people going, shares and saves, never who). Each email has a private link to those totals (anyone you give the link to can see them) and a link to stop the emails. To have your email deleted, email hello@unaryx.com.
- Claiming an event page. If you claim an event page, we use your name, email and the link you give only to check the claim and to send you that event's emails. Your email is never shown.
- Saying you're going. If you tap I'm going on an event page, your browser keeps a random code so it remembers your tap and you can undo it. We store that code with the event, plus a scrambled form of your IP address that changes every day, which we use only to stop one person's taps being counted many times. Neither is linked to a Suna account, and we don't use them for ads or analytics. If you type your first name to make a story image, it is used only to make that image and is never stored. Tap I'm going again to remove yours; the rest is deleted when the event is removed, a few weeks after it ends.
- Checking you're a person. When you use a form on unaryx.com (the email code on a Founding Locals page, the Android waitlist or List your event), a service called Cloudflare Turnstile checks in the background that a person, not a bot, is sending it. For that check Cloudflare sees your IP address and basic details about your browser. We use it only to stop spam and abuse, never for ads or tracking. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
2. How we use it
- To sign you in, including with a one-time code sent to your email.
- To show places and events near you and pick the ones that suit you.
- To send push notifications, such as a reminder when you are near a saved place, events nearby, and activity on your posts and trips. You can turn these off in iOS Settings.
- To run Ask Suna and trip planning, which use AI to answer your questions and build plans.
- To show your posts and published trips to other people.
- To keep Suna safe: moderating content, acting on reports, and preventing abuse.
- To fix bugs and improve the app, using analytics, session replays and crash reports.
- To give businesses listed on Suna totals of how many people saved or checked in to their place, and event organisers totals of how many people viewed, shared, saved or are going to their event. These totals never say who.
3. What other people can see
Your username, avatar, and anything you post or publish (photos, videos, captions, tips, published trips) are visible to other Suna users. Published trips and places can be opened by anyone with the link, including in a browser or the App Clip. People you invite to a trip can see that trip. Your saves, check-ins and location are not shown to other users.
4. Who we share it with
We do not sell your personal data, and we do not share it for advertising. We share it only with service providers that run parts of Suna for us:
- Supabase: database, sign-in, file storage and server functions.
- Apple: Sign in with Apple, purchases, maps, weather, push notifications and Search Ads attribution.
- Google: Google Sign-In; Firebase for push notifications, crash reports and basic app analytics; Google Maps Platform for place details and search; and Gemini for AI features.
- OpenAI: AI features, such as reading links you paste and planning trips.
- PostHog: app and website analytics, and session replays in the app.
- Resend: sending emails.
- Vercel: hosting unaryx.com and share pages.
When you use an AI feature, the text you enter, your preferences and the area you are in are sent to the AI provider to produce the answer.
Ticket and tour links on unaryx.com. Some links go to partners such as Klook, and we may earn a commission if you book. We do not send them your personal data. Once you are on a partner's site, its own privacy policy applies.
We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of our business.
5. Your choices
- Analytics and session replays: turn off Share Analytics in Suna's Settings.
- Crash reports: turn off Share Crash Reports in Suna's Settings.
- Location, notifications, camera, microphone and photos: change these in iOS Settings at any time.
- Your account: delete it in Suna's Settings, or email us.
6. How long we keep it
We keep your data while your account is active. Deleting your account in Settings permanently removes your account and the data linked to it from our database. Copies held by our service providers, such as analytics and crash reports, are deleted on their standard schedules. We remove content that breaks our rules.
What Suna remembers about you is kept until you clear it, turn it off or delete your account.
7. Where your data is stored
Our service providers may store and process your data outside your country. We use providers that apply recognised data protection standards.
8. Regional rights
A. Malaysia (Personal Data Protection Act 2010)
Unaryx is a Malaysian business and processes your data in line with the PDPA. You can ask to access or correct your personal data, and withdraw your consent by deleting your account or emailing us.
B. Australia (Privacy Act 1988)
We follow the Australian Privacy Principles. You can ask to access or correct the personal information we hold about you. If you think we have breached the APPs, contact us first; if you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC).
C. Indonesia (Law No. 27 of 2022 on Personal Data Protection)
By signing up, you consent to the collection of your data as set out in this policy. You can ask to access, correct or delete your data, or to pause its processing. If a serious breach affects your personal data, we will notify you and the relevant Indonesian authorities within 72 hours.
D. South Korea (Personal Information Protection Act)
- Consent: we ask for permission before using your precise location, through the iOS system prompt.
- Destruction: when you delete your account, your personal data is destroyed without delay and cannot be recovered, unless the law requires us to keep it.
- Your rights: you can access, correct, delete or suspend the processing of your personal information at any time in the app or by emailing us.
E. California (CCPA, as amended by the CPRA)
In the last 12 months we collected these categories of personal information, for the purposes in section 2, and disclosed them only to the service providers in section 4:
- Identifiers: email, name (if your sign-in provider shares it), username, device and push identifiers, IP address.
- Commercial information: Premium purchases.
- Internet or other electronic activity: app and website usage, searches, session replays.
- Precise geolocation (sensitive): used only to provide the features you ask for.
- Audio and visual information: photos and videos you choose to post.
- Inferences: your taste profile.
You have the right to know, delete and correct your personal information, and the right not to be discriminated against for using these rights. We do not sell or share personal information, and we use precise geolocation only for the services you request, so there is nothing to opt out of. To make a request, email hello@unaryx.com with the subject "CCPA Request". We will verify your request using your account email. An authorised agent may make a request for you.
9. Children
Suna is not for children under 14. We do not knowingly collect personal information from children under 14. If we learn that we have, we will delete it.
10. Changes to this policy
We will post any changes here and update the date at the top. If a change is significant, we will also tell you in the app.
11. Contact
Questions or requests about your data: hello@unaryx.com