Sunli privacy details

1. Who we are

Sunli is made and run by Reza Pirighadim, an individual (not a company), based in Türkiye. On this page “we” and “us” mean him and the small team that works with him on Sunli. He decides what happens to your data, so in European law he is the “controller”, and in the law of Türkiye the “data controller”. You can write to him at hello@sunli.app.

2. How this page works

Some parts of Sunli are built but switched off on our server. This page describes what is true today. Section 14 lists every part that is still switched off. For each one it says what it will send, and to whom. Before we switch a part on, its description is already here. If it needs words that are not here, we change this page first.

Switched on today: your account, your notes about your people, My Guide, hard days, the mood signal, sharing with people you link with, invitations, and three AI features (section 4), each behind your own yes.

3. What we keep, and why

Your account

• E-mail address. To make your account and sign you in. When e-mail is switched on (section 14), also to send you messages about your account.
• Password, if you choose one. We keep only a scrambled form of it (Argon2id). We cannot read it.
• Sign in with Google. Google sends us your e-mail address, your name and a link to your profile picture. We ask Google for nothing else.
• Sign in with Apple. Apple sends us an ID for you, your e-mail address (or a relay address if you choose “Hide My Email”) and, the first time only, your name. We keep a token from Apple so that we can tell Apple when you delete your account.
• Your name in Sunli and your gender (woman or man). The gender is used where a word depends on it (wife or husband), and to offer the cycle option to women only.
• Language, calendar and time zone, so the app speaks your language and shows the right dates.
• Whether you want news by e-mail. It is off unless you turn it on.
• Your yes to AI, and which wording you said yes to.

Why: we need these to give you the account you asked for (in European law: a contract).

What you write in Sunli

• Your people: their name, how they relate to you, their ring and colour, their city and time zone, whether they have died, and your notes about them.
• How you reach them: up to five phone numbers with a label, whether you usually ring or write, and whether you write to them formally. If you pick people from your phone’s contacts (section 3, “Picking people from your contacts”), the names and numbers you picked.
• Birthdays and dates: we keep each date in the Western (Gregorian) calendar, and also the date as you typed it, in the calendar you chose (for example the Persian calendar). Dates you add have a title (for example “Mum’s check-up”), a day or a yearly date, a time, and the person they are about.
• Today: what you did with each day’s suggestion (done, later, not now) and when. Which yearly occasions you want to see (for example Nowruz), and the time of your morning note.
• My Guide: what helps you on a hard day, and who may read each line.
• Your mood signal, if you set one.
• Hard days: the days you mark as hard, the reason you choose (for example illness or a loss) and your note. The cycle reason is not sent (section 5).
• Sharing: what each linked person may see about you (Nothing, Hard days or Everything).
• Links and invitations: who you are linked with in Sunli. An open invitation is kept as a scrambled link and a scrambled 8-character code, for one week at most. If you add your first name and a short line to an invitation, they are sealed and erased when the invitation is used, cancelled or runs out. Today nobody is shown them (section 14).
• Feedback you send us from the app, and the reason you give if you delete your account.

Why: so it is there on your next device, and so the people you chose can see what you chose (a contract).

Some of this can say something about your health, for example a hard day because of illness, or a date called “check-up”. We treat all of it with the same care. The review team can read it (section 6).

Picking people from your contacts

If your browser offers a contact picker (Chrome on Android does), you can pick people from your phone’s contacts when you add people. The browser shows its own list. The app receives only the name and the phone numbers of the people you pick, and nothing else from your contacts. It saves them only after you check them.

Your devices and sign-ins

When you sign in, we keep for each device: a random device number made by the app, the device’s name (for example “Chrome on macOS”), the platform, the app version, your time zone, your browser’s language, the internet address (IP address) you signed in from, and your browser’s “user agent” text. We also write each sign-in in a security log, with the IP address.

Why: to keep your account safe, to show you your signed-in devices, and to stop abuse (in European law: our legitimate interest in security).

Counts we keep

• How many times a day you used each AI feature, and how many of those failed. This keeps your daily allowance right.
• How many invitations were opened each day, as one number per day, with no names and no ids.

What we do not collect

• No location. We never ask your device where you are.
• No adverts, no ad trackers, no third-party analytics, no data brokers.
• We do not record your country.
• We do not sell or rent your data to anyone.

4. The AI features

Three features use AI. They work only while they are switched on for everyone, and only after you said yes in the app. The app asks before your first use. Nothing is sent before you say yes. You can take your yes back at any time, and after that nothing more is sent.

The AI is provided by OpenAI. We use OpenAI’s service for businesses (its API). OpenAI says on its own page that data sent to its API is not used to train its models unless the customer chooses to share it. OpenAI also says it keeps logs for abuse monitoring for up to 30 days, unless the law requires longer. Our server does not ask OpenAI to store the conversation. We read OpenAI’s page on 15 November 2026: developers.openai.com/api/docs/guides/your-data. OpenAI’s terms are on that page and at openai.com/policies.

The app does not add your name, your e-mail address, your list of people or anyone’s phone number to what it sends OpenAI. What you type yourself is sent as you typed it.

The companion

• What is sent: a fixed instruction, short notes about the customs of your app language, the last 20 messages of that conversation (yours and the companion’s), and your new message.
• What we keep: your messages and the replies, sealed with a key (AES-GCM), until you delete the conversation or your account. Deleting a conversation erases it at once. We count your messages per day for your allowance.
• Who can read it: you, and the review team (section 6). Nobody you link with sees your conversations.
• Reporting: every reply has a Report button. A report keeps that one reply and your reason, sealed. In our tools a report shows that reply and the reason, without your name. A report stays after you delete the conversation, and is erased with your account.
• The companion is an AI. It does not play a person, it does not speak as someone who has died, and it does not diagnose. It can be wrong. It is not medical help or crisis help.

Help writing a message

• What is sent: the kind of moment (for example a birthday), the person’s first name, the word for who they are to you (for example “mother”), whether you write to them formally, your language, the app’s own starting sentence with the name in it, and short notes about the customs of your language. In languages where the words change with the writer’s gender, also whether you are a woman or a man.
• What is not sent: your notes, your other people, phone numbers, or what you wrote about a coming date.
• What we keep: nothing, except the daily count. The message is shown only to you. You change it and send it yourself, from your own app.
• Reporting: you can report a message the app wrote. Then we keep that message and your reason, sealed, so we can review it, without your name. It is erased with your account.

Help adding your people

• What is sent: the words you write about your people (up to 4,000 characters at a time), your language and calendar, today’s date, and the app’s list of words for relations in your language.
• What comes back: suggestions of names, relations, cities and dates, taken from your own words.
• What we keep: nothing, except the daily count. Not your words and not the suggestions. Nothing is saved until you check it and save it yourself.

When we answer you

If you send us feedback in a language the team does not read, a team member may press Translate. Then only that feedback text goes to OpenAI, to be translated.

Not switched on: voice

Talking to the companion by voice is built and switched off. Section 14 says what it will send.

5. What stays on your device

• The cycle reason. If you mark a hard day because of your cycle, the word “cycle” stays in the app on your device. Our server refuses it if it ever arrives. Because it is only on your device, it is lost if you sign out or clear the app’s data.
• Your settings for this device: theme, text size, language and similar choices.
• A copy of your notes, so the app works without a connection. Signing out wipes it from that device.

The web app keeps these in your browser’s local storage, session storage, IndexedDB and cache. The full list of names is in the appendix at the end of this page. The app sets no cookies of its own. Our server sets one cookie, wb_refresh, which keeps you signed in. No script can read it, and it lasts up to 30 days.

On phones, the app’s data is kept out of iCloud and Google backups and out of phone-to-phone transfer. Your data comes back from our server when you sign in.

6. Who sees your data

• You.
• The people you link with, only as far as you choose. For each person you set Nothing, Hard days or Everything. “Hard days” shows that a day is harder, never why. “Everything” also shows the reason (never the cycle reason), your mood, and the My Guide lines you chose for that person. You can change this on any day. The other person is not told when you change it.
• The review team at Sunli. A small specialist team can read users’ data in our internal tools: your account, your people and notes, dates, My Guide, moods, hard days, feedback, reported AI texts and your conversations with the companion. They read it only to improve how Sunli and its AI work, to answer a support request, or for safety and legal reasons. Not everyone who works with us has this access, and each access is recorded. In European law our reason is our legitimate interest in a service that works well and is used safely; for a support request it is the contract with you.
• The companies in section 7, only to do their job for us.
• Authorities, only when the law requires it.

Companion conversations, reported AI texts, invitation names and lines, and Apple tokens are sealed with a key before they are stored. Sealing protects them on the disk. It does not stop the review team, whose tools can open them.

7. Companies that help us run Sunli

These companies process data for us today. Each may use it only to do this job for us.

Their terms: Fly.io, Upstash, Cloudflare, OpenAI, Google, Apple. More companies are added only when a part in section 14 is switched on. Each is named there first.

8. Where your data is

Your account and notes are stored in Frankfurt, Germany. We are in Türkiye. Some of the companies above are based in the United States, and OpenAI, Cloudflare, Google and Apple work in many countries. When data goes to a country that the EU or the UK has not approved for data protection, we rely on each company’s data protection terms, linked in section 7.

9. How long we keep it

10. How we protect it

• Every connection to Sunli uses HTTPS.
• The database disk is encrypted by our host.
• Passwords are kept only as Argon2id hashes. Invitation links and codes are kept only as hashes.
• Companion conversations, reported AI texts, invitation names and lines, and Apple tokens are sealed with AES-GCM before they are stored.
• No script can read the sign-in cookie. On phones the sign-in token is kept in the phone’s secure storage (Keychain or Keystore).
• Every query for your data is limited to your account. Automatic tests check that one account cannot reach another’s data.
• Only the review team can read users’ data in our tools, and each access is recorded. A team member must confirm the password again before changing anything, and every change is logged.

No system is perfectly safe. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

11. How to delete your account or ask for your data

In the app. Open You, then Delete account, and confirm. Your account closes at once and every device is signed out. For 30 days you can sign in again and restore it. After 30 days we erase your account and everything you wrote: your people, notes, dates, My Guide, moods, hard days, sharing, links, invitations, companion conversations, reports, feedback and AI counts. Copies in our backups are gone within 5 more days.

What is kept after that: the record of e-mails we sent you (for 180 days), the lines of the security log without your account, and the reason you picked from the list when you left, without your account (section 9).

Without the app. Write to hello@sunli.app from the address of your account and say that you want your account deleted. We may ask you to prove that the account is yours, and we never delete an account on an e-mail alone without that proof. We do it within one month.

A copy of your data. Write to hello@sunli.app. Within one month we send you a file with your profile, people, notes, dates, My Guide, moods, hard days, sharing, links, invitations and companion conversations.

12. Your rights

Depending on where you live, you have the right to see your data, correct it, delete it, get a copy, object to some uses, and take back your consent. In Türkiye the Personal Data Protection Law (No. 6698) gives you these rights too.

We answer within one month. We may ask you to prove the account is yours.

13. Age

Sunli is for adults, 18 and over. We do not ask your age, and we do not check it. If you think someone under 18 has an account, write to us and we will delete it.

14. Parts that are not switched on yet

Each block is true from the moment its part is switched on. Until then, none of it happens.

Voice with the companion

• Your device’s own voice: your device turns speech into text and reads the reply aloud. The text goes on as in section 4. The app asks for the microphone only when you turn voice on.
• The natural voice (after a separate yes): what you say is sent to Microsoft Azure Speech in Sweden to be turned into text, and the reply is sent there to be read aloud. The recording is processed in memory and deleted at once. Neither we nor Microsoft store it. The words are kept in your conversation like typed messages. We count the seconds of reply audio for your allowance.

Usage counts

Counts are our own. No other company receives them.

• The app counts things like: the app opened, a screen opened, which kind of suggestion Today showed and which button you pressed, how people were added, whether you allowed notifications, an error’s kind, and how fast screens load. Before you have an account, these counts carry a random number made on your device.
• They never say who a suggestion was about, what it said, what you wrote, or the value of a setting.
• Raw counts are kept 13 months, daily totals up to about 2 years.

E-mail

Today we send no e-mail at all. When it is switched on, Resend (USA) sends our e-mails. It receives your e-mail address and the message, and keeps delivery records in the United States. Resend will also receive the mail you send to our address, in Ireland, and pass it to our server. Everyone gets account e-mails (confirming your address, a new password, deletion). News goes only to people who turned news on.

If counting clicks in e-mails is switched on, a button in our e-mails goes through our own server once, so we can count that it was pressed. We do not record your browser or your IP address with it.

Notifications

• Reminders set by your phone (a future phone app): your phone sets them, so no server sends them. On the lock screen they never name a person or say why.
• Push messages from us: we keep a push token for your device. Google’s Firebase Cloud Messaging, Apple’s push service or your browser’s push service carry the message. Lock-screen text never names a person, a hard day, a mood or anything about your cycle.

Contacts in the phone apps

The same as “Picking people from your contacts” in section 3, with your phone’s own contact picker. The app never reads the rest of your contacts.

Invitations that show your first name

The invitation page shows the person you invite your first name and the line you chose, and nothing else about you. They can read it without an account while the invitation is open. You are not told that someone opened it; you see only when they accept.

Android installs from an invitation

If you install the Android app from an invitation link, Google Play passes a one-use code from the link to the app once. It only connects your install to that invitation, and it is deleted when you accept.

The waitlist on the website

If you leave your e-mail address, we keep it with the page’s language and the time, and send one e-mail with a link to confirm. We use it only to tell you when the app opens.

Paid plans

In the iPhone app you will pay Apple; in the Android app, Google Play. They handle the payment and the receipt and tell us your plan. We never see your card.

Error reports and an off-site backup

No error-tracking company is used today. If we add one, we name it here first. A weekly copy of the database to a second place (Cloudflare R2, in the EU) is built and switched off. If we switch it on, we write here how long the copies are kept.

15. Changes to this page

When we change this page or the privacy policy, we change both together, post the new version with its date, and say what changed. Earlier versions are listed on this page.

16. Law, and how to reach us

• E-mail: hello@sunli.app
• This page is governed by the law of Türkiye. If the privacy law of the country you live in protects you more, you keep that protection.
• You can complain to the data protection authority where you live or work.

Appendix: what the web app keeps in your browser

• Local storage: wb.theme, wb.textScale, wb.locale, wb.deviceId (a random number), wb.switches, wb.productSwitches, wb.syncEntities, wb.peopleView, wb.aiConsent, wb.aiConsentCards, wb.aiConsentAccount, wb.activityOn, wb.cancelAsked, sunli.review, sunli.accountSheet, wb.secure.refresh (empty on the web).
• Session storage (gone when you close the tab): sunli.arrival, sunli.oauth.state, sunli.newsChoice, sunli.returnPath, sunli.afterSetup, sunli.lastOpenedUrl.
• IndexedDB: sunli-app (your profile, people, dates, Today, guide, mood, hard days, sharing, what stays on this device, and changes waiting to be sent) and sunli (older tables the app no longer uses).
• Cache: the app’s own files, pictures and fonts.
• Cookie from our server: wb_refresh (keeps you signed in, no script can read it, up to 30 days).

Versions of this page

• Version 1, 15 November 2026: First published version.