Privacy Policy

Sundae ("Sundae," "we," "us," or "our") is a sole proprietorship that operates the Sundae web application (the "Service"), an AI-guided weekly planning tool that helps you set priorities and turns them into calendar blocks on your behalf. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you don't agree, please don't use the Service.

1. Information We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture as provided by Google.

Google Calendar data

With your permission, Sundae connects to your Google Calendar to (a) read your existing events so it can propose realistic time blocks, and (b) create or update events on your primary calendar — but only after you've reviewed and confirmed the proposed change. Sundae never writes to your calendar without an explicit confirmation step from you.

Planning content you provide

This includes the roles you define (e.g. "founder," "parent," "athlete"), your goals, your answers during guided weekly sessions, and your responses to daily follow-up check-ins.

Payment information

Subscription payments are processed by Stripe. Sundae does not receive or store your full card number — Stripe handles that directly and shares with us only what's needed to manage your subscription (e.g. plan status, trial dates).

Usage and log data

Like most web services, our hosting and infrastructure providers automatically log standard technical data (IP address, browser type, pages visited, timestamps) for security and reliability purposes.

2. How We Use Information

• To run your guided weekly planning sessions
• To propose and, once you confirm, create calendar events
• To send you daily brief and follow-up emails about your plan
• To process your subscription and free trial via Stripe
• To maintain, secure, and improve the Service
• To respond to support requests

We do not sell your personal information.

3. Google User Data & Limited Use

Sundae's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your Google Calendar data is used solely to provide and improve the calendar-planning features of the Service described above — it is never used for advertising, and it is never sold or shared with third parties for their own purposes.

4. Third-Party Services

We rely on a small number of trusted providers to run Sundae, each of which processes data on our behalf under their own security and privacy commitments:

• Google — sign-in and Calendar API access
• Supabase — database hosting and authentication
• Vercel — application hosting
• Stripe — subscription billing and payment processing
• Our transactional email provider — delivering your daily brief and follow-up emails

As Sundae adds features (for example, SMS notifications), this list and this policy will be updated accordingly before those features launch.

5. Data Retention

We retain your account and planning data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to retain records (for example, payment records) to comply with law.

6. Your Rights & Choices

• Revoke calendar access at any time from your Google Account permissions page.
• Delete your account and associated data from your account settings or by emailing us.
• Opt out of non-essential emails via the unsubscribe link in any email we send.
• Request a copy or correction of your data by contacting us.

7. Data Security

We use industry-standard safeguards — including encryption in transit, row-level security on our database, and access-controlled infrastructure — to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information to a high standard.

8. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If you believe a child has provided us personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service before the changes take effect.

10. Contact Us

Questions about this policy or your data? Reach us at tyleramberry@gmail.com.