Privacy policy

Sunday is a small product run by one person. This page explains, plainly, what we collect, why, and what we do with it. If anything here is unclear, email lucas.porter.bakker@gmail.com.

Who we are

Sunday is operated as a sole proprietorship by Lucas Porter-Bakker, based in Canada. For privacy questions or data requests, contact lucas.porter.bakker@gmail.com.

What we collect

• Account info. Your email address and the names of the people you send Sunday letters to (and their email addresses, if you invite them).
• Photos and captions. The photos you choose to include in a Sunday letter, plus any captions or notes you add. Photos that you only "heart" in the iOS app stay on your device and are never uploaded to Sunday until you actually send a letter that includes them.
• Letters and albums. Past Sunday letters you've sent and any albums you create in Sunday Studio.
• Billing info. If you subscribe to Sunday Studio, Stripe handles your card and billing details. We don't see or store your card number — we only store a Stripe customer ID and your subscription status (trialing, active, etc.).
• Basic logs. IP address and basic request logs are kept briefly to keep the service running and catch abuse. We don't run analytics or trackers on the website.

Why we collect it

• To send your weekly letter to the recipients you choose.
• To let recipients view past letters on the web.
• To run your Sunday Studio subscription, if you have one.
• To respond when you email us for support.

We don't sell your data. We don't show ads. We don't share photos or letters with anyone outside the people you sent them to.

Who we share it with

Sunday is built on a few trusted services. Each only sees the data they need to do their job:

• Supabase — stores your account, photos, and letters (database and file storage).
• Stripe — handles all subscription payments. Stripe stores your card; we never do.
• Vercel and Fly.io — host the website and API.
• Resend — delivers the weekly email letter.

We may also share information when required by law, or to protect the safety of users.

How long we keep it

We keep your account, letters, and albums for as long as your account is active. If you delete your account, we delete your photos, letters, and personal information within 30 days. Anonymized billing records may be kept longer to comply with tax and accounting law.

Your rights

You can:

• Ask for a copy of the data we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete your account and the data tied to it.
• Cancel your Sunday Studio subscription anytime from your account.

Email lucas.porter.bakker@gmail.com for any of these and we'll handle it within 30 days.

Children

Sunday is intended for adults sharing photos of their family. The account holder must be 16 or older. Photos of children are shared at the discretion of the parent or guardian who runs the Sunday account.

Security

Your data is stored in Canadian and U.S. data centers run by our hosting partners. All traffic between your device and Sunday is encrypted (TLS). Photos and letters are stored encrypted at rest. No system is perfect — if you spot something that looks wrong, please email us.

Changes

If we change this policy in a meaningful way, we'll update the effective date at the top and, where appropriate, email you about it.