Your privacy in Sundial

This policy describes how Scott Mackie operates Sundial Habits and sundialhabits.com. Contact support@sundialhabits.com with privacy questions or requests.

What we collect

• Account information: your email address, an account identifier, sign-in verification and password-reset records, and authentication sessions. Email/password accounts store a password hash, not the password itself. Apple sign-in also stores your Apple account identifier, your name when Apple provides it, and an encrypted token used to disconnect Apple access when you delete your account. Apple may provide a private relay email address instead of your personal address.
• Habit information: the titles, order, reminder times, and colors you choose, archived status, completion dates and time zones, and records needed to sync your changes across devices. Habit titles can contain personal information you choose to enter.
• Private tasks and lists. Sundial stores task titles, notes, checklist items, list names and ordering, planned dates, deadlines, reminder times, and completion dates and time zones. This lets you use the same lists across your devices. Only you and apps you grant task access can see them in Sundial.
• Friends: your chosen display name, invitation code and expiry, and friend connections, shared check-ins, cheers, blocks, and content reports. New habits offer Visibility: Friends or Private, with Friends selected by default. Existing private habits remain private. For a Friends habit, current friends can see its title and recorded completion days in their feeds and optional friend notifications. They cannot see your other habits. Your display name defaults to your Apple name when provided, or your email address. You can change it in Settings before connecting with friends. Anyone with your unexpired code can add you as a friend. New friends see eligible activity published after connecting.
• Notifications. Habit and task reminder times sync with your account. Each phone schedules personal reminders and optional planning prompts locally. If you allow notifications, the service can register an installation identifier, APNs device token, delivery environment and timezone. Friend notification frequency and your chosen receiving installation are stored with your account. Optional smart reminders also store a selected receiving phone and delivery records for your own planned items. Push notifications can include task and habit titles on your lock screen.
• Technical information: network IP addresses, request and error information, session timestamps and client identifiers used to operate, secure and troubleshoot the service.
• Support messages: your email address and the information you send when asking for help.

How we use it

We use this information to sign you in, save and sync your tasks and habits, deliver verification and password-reset emails and enabled friend updates, connect you with friends you invite, provide support, and protect the service against abuse. Sundial has no advertising or third-party behavioral analytics. We do not sell your personal information or use it for tracking across other companies' apps and websites. Private habits and their check-ins are hidden from friends; a connected app you authorize can access them. You can choose visibility when creating a habit and change it later. Reports help us review and remove abusive shared content.

Service providers

Cloudflare hosts the website, API, and notification sender and processes network traffic. PlanetScale stores account, task, habit, and friend data in a US-based database. Resend delivers authentication emails. Apple authenticates users who choose Sign in with Apple and delivers remote notifications through APNs. Email delivery and support providers process messages sent to us. These providers process the information needed to provide their services.

Optional agenda arrangement

Arrange Today is off until you enable it in Settings → Agenda. It sends today's incomplete task and habit titles, their timing, planned dates and deadlines, whether exact reminders exist, your current agenda order, timezone, language, and arrangement preferences to hosted Mechane and its model provider. Task notes, checklist text, and friend activity are not sent. Mechane returns an ordering, short headings, and optional smart reminder suggestions. Sundial validates these before updating your agenda. Your dates and exact reminders remain under your control, and you can reorder items yourself.

You can turn arrangement and smart reminders off separately. Turning arrangement off stops future planning requests and clears generated headings; it preserves your current order. Information already sent may remain in Mechane's conversation history and its providers' records under their retention policies. Deleting your Sundial account removes the planner settings and pending reminders held by Sundial. Contact support with questions about information already sent to a provider.

Connected apps

You can authorize an assistant or other app to read your habits, including private habits, schedules, reminders, check-in history, and progress. Read and Record Check-ins access also lets it complete or undo habits. A shared check-in can appear to friends and trigger your enabled friend notifications. Task permissions are separate. Read Only task access includes private lists, task notes, checklist rows, and dates. Read and Plan Tasks also lets the connection capture tasks, change planned dates, complete tasks, and reopen them. Each connection has its own expiring access key. We store a hash of the key, its name, permissions, expiry and last use, and retry records for confirmed writes. The connected service processes information it receives under its own privacy policy.

Disconnect an app in Settings to stop future access. Information already read may remain in that service's history or memory. Deleting your Sundial account removes its access keys and retry records along with your account data.

On your devices

Sundial stores tasks, lists, habits, pending changes, your friend list, and downloaded feed cards locally so it can work offline. Stopping sharing, removing a friend, or blocking removes affected cards after the receiving app refreshes. It cannot erase screenshots or instantly clear offline devices. Authentication credentials use Apple's Keychain. Data is sent to the service over encrypted connections. The service can read task and habit data to synchronize your devices.

Retention and deletion

We keep your account, task and habit data while your account exists. You can permanently delete your live account and associated tasks, lists, habits and history from You → Settings → Account → Delete Account. Deletion also clears the app's account data on the iPhone where you request it and revokes account sessions and their push registrations. Notification preferences and owned jobs are removed too. Deletion removes friend invitations, connections, shared check-ins, cheers, blocks, and reports associated with the deleted account or its check-ins. We do not retain separate report-content snapshots. It also revokes Apple access if you used Sign in with Apple. Friends see your removal after their app reconnects.

Copies on other offline devices remain until you remove the app's data from those devices. Those sessions can no longer sync. Database backup copies expire on the configured backup retention schedule, currently two days. Limited email, security, rate-limit and operational records may remain under provider retention schedules to operate and protect the service.

Completed or suppressed notification jobs expire from operational storage after thirty days. Signing out revokes this phone's remote registration and clears its owned notifications. Previously accepted APNs payloads cannot reliably be recalled. You can turn off reminders and friend updates in the app, or disable all Sundial notifications in iOS Settings. An offline frequency change takes effect on the server after sync. We do not collect location for reminders.

Your choices

You can update your habit activity in the app, delete your account, or contact support to request access to, a copy of, correction of, or deletion of your personal data. We may verify your account ownership before acting on a request. Depending on where you live, you may have additional privacy rights or the right to contact your local data protection authority.

Children

Sundial is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it.

Changes

We will update this page when our practices change and update the date above. Material changes may also be communicated in the app or by email.