Privacy policy

AI assistant plugins

Last updated: 15 October 2026

ElementX Limited (“ElementX”, “we”, “us”, “our”) provides the UVLens plugin for AI assistants such as ChatGPT, Grok Bot and Cursor, and the UVLens MCP server at mcp.uvlens.com that the plugin uses (together, the “Plugin”).

This Privacy Policy applies only to the Plugin. The UVLens mobile application and the UVLens website have their own privacy policies.

Privacy contact: support@uvlens.com

Postal address: Commercial Bay Tower Level 17/19 Customs Street West, Auckland Central, Auckland 1010

ElementX is not required to appoint a Data Protection Officer under Article 37 of the GDPR due to the nature and scale of its processing activities.

1. What the Plugin does

The Plugin gives AI assistants UV index forecasts. It can find places by name, show the UV forecast for a place and day, find lower-UV times for outdoor plans, and, if you give your skin type, estimate how long until unprotected skin burns.

The Plugin has no user accounts and does not use your device location.

2. Personal data we receive

Your AI assistant sends us only what each request needs. Depending on what you ask, this can include:

  • Place names: the name of a place you asked about, and optionally a country code
  • Place coordinates: the latitude and longitude of a place you chose, such as a town, beach or address
  • Dates and times: the day or times you asked about, such as the times of a planned activity
  • Skin type (optional): a Fitzpatrick skin type from 1 to 6, if you give one, used to estimate burn time
  • Request metadata: technical information your AI assistant adds to each request, such as its server’s IP address, its software version and, for some assistants, an anonymised user identifier, language or approximate location. The Plugin does not use these identifiers or the approximate location.

Your skin type can relate to your health or ethnicity. We use it only to calculate the response to your request, and we do not store it.

3. How we use personal data

We use the data in a request only to:

  • Find the places you ask about
  • Return UV forecasts, lower-UV times and burn-time estimates
  • Limit request rates and protect the security of the Plugin
  • Diagnose and fix problems

We do not use the data to identify you, build a profile of you, or show advertising, and we do not use it to train AI models.

Legal bases

Processing is based on our legitimate interests in providing the Plugin and keeping it secure, and on your choice to send us a request. You choose whether to give a skin type, and the Plugin works without one.

4. Sharing personal data

We share limited data with:

  • Google Cloud: hosts the Plugin’s server
  • Open-Meteo: receives the place names you search for, to find matching places, under its own privacy policy
  • Authorities: where required by law or to protect our legal rights

Your AI assistant’s provider, such as OpenAI or xAI, handles your conversation and the requests it sends to us under its own privacy policy.

We do not sell personal data.

5. International data transfers

Personal data may be processed outside the European Economic Area or the United Kingdom, for example where service providers operate internationally. Where required, appropriate safeguards such as standard contractual clauses are used.

6. Data retention

  • Skin type: used only while answering the request. It is not stored or logged.
  • Request contents: place names, coordinates, dates and times are not written to our logs.
  • Short-lived caches: to answer quickly, the server keeps place-search results by place name, and forecasts by coordinates rounded to about 11 km, in memory for up to 24 hours. These caches do not record who made a request.
  • Request logs: Google Cloud records the time, address, calling server’s IP address and software version of each request, but not its contents. These logs are kept for 30 days for security and troubleshooting.

7. Your rights

If you are located in the EEA or the UK, you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. Because the Plugin has no accounts and does not keep request contents, we usually hold no personal data that we can link to you.

To exercise your rights, contact support@uvlens.com.

You also have the right to lodge a complaint with your local data protection authority.

8. Children

The Plugin is not directed at children under 13, and we do not knowingly collect personal data from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.