Sunday

Privacy Policy

Your life stays yours.

Effective date: October 6, 2026

What Sunday is

Sunday ("we," "our") is a personal planning app operated by Leisure Intelligence. It helps you carry less by gathering what you choose to connect — calendars, tasks, reminders, and email — into one calm daily plan. This policy explains what we collect, why, and the control you keep over all of it. Sunday is available in the United States and other countries — this policy applies wherever you are, and the rights sections below name the protections that come with where you live.

What we collect

Account information. Your name and email address when you create an account.

What you put into Sunday. Tasks, lists, notes, meal plans, preferences, household members and contacts you add, and photos or screenshots you choose to share for Sunday to read.

Connected sources — only what you turn on. Every connection on the Connect page is optional and off until you enable it:

Google Calendar — we read your events to show them in your plan, and create events only when you ask Sunday to put something on your calendar. Google Tasks — we read your task lists to bring open tasks into Sunday. Gmail — when you enable it, Sunday scans your inbox for things that need you (action items, appointments, deliveries, travel confirmations) and shows only those. If you archive or label an email from inside Sunday, we apply that change to your mailbox. We never send email on your behalf without your action.

Checking while you're away. Scans run when you open Sunday. If you also turn on background checking, Sunday reads your mail and calendar on a schedule when the app is closed, so your plan is ready before you ask. Background checking only ever reads. Every change Sunday makes to your Google account happens while you are in the app, as the direct result of something you did: ticking an item done archives the email it came from, and giving a task a date of your own puts it on your calendar. A date Sunday merely inferred never becomes an event. You can turn background checking off on the Connect page at any time, which deletes the stored permission.

Apple Calendar and Reminders. In the Sunday iPhone app, access happens on your device through Apple's own permission system. On the web, you may connect iCloud with an app-specific password you create at account.apple.com; we store that password encrypted (AES-256-GCM) and you can revoke it at Apple at any time.

Location (optional). Only if you turn on location features, we store a coarse home area (rounded coordinates) to power weather and errand suggestions. Precise location is never tracked in the background.

How we use it

We use your information for exactly one purpose: to run Sunday for you — building your daily plan, surfacing what needs you, and powering the features you use. We also use AI models to summarize and organize your information (for example, turning a scanned email into a short action item). Our AI providers process your data only to provide the feature and do not use it to train their models.

We do not sell your data. We do not share it with advertisers. We show no ads. No humans read the content you put into Sunday except with your explicit permission (for example, if you ask for support on a specific problem). Our team does review de-identified usage records — described in the next section — to make Sunday better.

How we learn from Sunday

To improve Sunday, we keep a record of how the product performs: what kind of thing it surfaced (a life-area label like "school" or "financial" — never the thing itself), what happened to it (acted on, dismissed, snoozed), how far ahead it was caught, and how you rated it. These records are metadata only. They do not contain the text of your emails, your event titles, names, or anything you wrote.

Our founder and team review these records, individually and in aggregate, to understand what Sunday catches well and where it fails — and to publish aggregate, anonymized insights about the invisible work of running a life. Aggregate insights can never identify you or reveal anything you put into Sunday.

Google user data — Limited Use disclosure

Sunday's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: your Google Calendar, Tasks, and Gmail data is used only to provide the Sunday features you see, is never sold, never used for advertising, and never transferred except as necessary to provide those features, comply with law, or as part of a merger with equivalent protections.

Sharing

Your data is shared only: with household members you explicitly invite, and only the specific things you share with them (like a grocery list); with the service providers that run Sunday (secure hosting, the Google and Apple services you connected, and AI processing) — each bound to use it only to provide their service; and if the law requires it.

Your privacy rights — United States

If you live in the United States, state privacy laws give you rights over your personal information. California residents have the strongest set under the California Consumer Privacy Act as amended (CCPA/CPRA); residents of other states with privacy laws in force — including Virginia, Colorado, Connecticut, and Texas — have substantially the same rights.

You can ask us to: confirm what personal information we hold about you, give you a copy of it, correct it, or delete it. Email hello@myappsunday.com and we'll verify the request and respond within the timeframe your state's law requires.

You can say no to selling and sharing. Sunday does not sell your personal information, and we do not share it for cross-context behavioral advertising or sell it to data brokers — so there is nothing to opt out of. If that ever changed, this policy would say so first.

We will never treat you differently for using any of these rights.

Your privacy rights — Europe (GDPR)

Sunday is operated from the European Union, so we handle your data under the EU General Data Protection Regulation (GDPR) — wherever in the world you live.

GDPR gives you the right to access your data, have it corrected or erased ("the right to be forgotten"), restrict or object to how we use it, receive a portable copy, and withdraw consent at any time — disconnecting a source on the Connect page is exactly that. Where we rely on your consent, taking it back is always as easy as giving it.

We process your data because you asked us to run Sunday for you (your account and your plan), because you consented (optional sources like location, background checking, and the iCloud connection), or because a law requires it. You can lodge a complaint with your national data protection authority at any time.

Retention and deletion

Completed items are automatically deleted 30 days after you mark them done. Everything else is kept while your account is active so your plan stays whole.

You can disconnect any source at any time on the Connect page — disconnecting Google revokes our access, and turning off both Apple toggles deletes your stored iCloud password entirely. You can also revoke Sunday's access from the outside at Google security settings or account.apple.com. To delete your account and all data, email hello@myappsunday.com — we complete deletion within 30 days.

Security

All data moves over encrypted connections (TLS). Credentials you entrust to us — like an iCloud app-specific password — are stored encrypted with keys that live only on the server. Access tokens for Google are held by our authentication provider and are never exposed to other users. If you turn on background checking, the longer-lived Google permission that makes it possible is stored encrypted (AES-256-GCM) with a key that exists only in our server environment and never in the database — so a copy of the database alone could not reach your Google account. Disconnecting revokes that permission at Google and deletes it here.

Children

Sunday is not directed at children under 13, and we do not knowingly collect their data — consistent with the US Children's Online Privacy Protection Act (COPPA) and the GDPR rules on children. If you believe a child has given us information, email us and we will delete it.

Changes and contact

If this policy changes in a way that matters, we'll say so in the app before it takes effect. Questions, requests, deletions: hello@myappsunday.com.

Sunday · Leisure Intelligence · myappsunday.com