Privacy Policy
Effective October 2, 2026
- We collect only what's needed to run your account and subscription: your email, the name you share when signing in, and your subscription status.
- Your alarms, wake-up history, selfies and custom sounds stay on your phone.
- Camera and voice tasks are checked on your device, and we never save or upload recordings. (Where on-device speech recognition isn't available, your phone's own speech service may process voice tasks; see below.)
- No ads, no tracking across other apps, and we never sell your data.
- You can delete your account and its data anytime from inside the app.
This Privacy Policy explains how Demand Generation LLC ("we", "us") handles information when you use the Sunstir mobile app and the Sunstir website (together, the "Service"). By using the Service, you agree to this policy.
1. Information we collect
Account information
To use Sunstir, you create an account with Sign in with Apple, Google or an emailed one-time code. We receive:
- Your email address. If you use Sign in with Apple and choose "Hide My Email", we receive a private relay address instead.
- Your name, if your sign-in provider shares it.
- An account ID and basic sign-in records, such as when your account was created and last used.
Subscription information
If you subscribe to Sunstir Pro, payment is handled entirely by Apple (App Store) or Google (Google Play). We never see or store your card details. We receive your subscription status, plan, trial and renewal dates, and an anonymous purchase ID so Pro can follow your account to a new phone.
Information stored only on your device
The following is stored on your phone and is not sent to us:
- Your alarms, settings, app theme and profile (display name and avatar)
- Your wake-up history, streaks, progress and insights
- Morning selfies you take for your timelapse, and photos you use for photo-match or scavenger-hunt tasks
- Custom alarm sounds you create from your own audio files
- Notes you write, such as your daily top priority
Deleting the app removes this information from your device. We can't recover it.
Camera, microphone, motion and photos
Some wake-up tasks use your phone's sensors. The app only asks for access when you choose a task that needs it, and you can say no or turn access off in your phone's settings at any time.
- Camera: used for tasks like counting push-ups, checking your eyes are open, matching a photo, reading a page or scanning a barcode. Video frames are analyzed on your device in real time and are not recorded or uploaded. To count exercises, the app downloads a standard pose-detection model from Google's servers (via the jsDelivr and Google Cloud Storage content networks). This is a download only; no images or personal data are sent.
- Microphone and speech recognition: used for voice tasks like "Say it out loud" or "Hold a note". Sound levels are measured on your device. When the app turns your speech into text, it uses on-device recognition where your phone supports it. Otherwise your phone's built-in speech service may process the audio: Apple's speech recognition on iPhone or Google's on Android, under their privacy policies. We don't receive or store recordings.
- Motion sensors: used for tasks like shaking your phone, walking or spinning. Readings are processed on your device.
- Photos and files: used only when you pick a photo for a task or an audio file for a custom sound. The file is copied into the app on your device.
Notifications
Alarms are scheduled locally on your phone. We don't send marketing push notifications.
Crash and error reports
If the app crashes or a task fails (for example, the camera can't start), the app sends us a crash report so we can fix it. A report contains the error and where in the app it happened, your phone model and operating system version, the app version, and the screens and buttons you used just before. It doesn't include your name, email, photos, recordings, camera images or anything you typed, and it isn't used to identify you or for advertising.
App usage
To learn which features help people wake up, the app sends anonymous usage events, such as finishing setup, saving an alarm (its task, difficulty and time), completing or switching a wake-up task, and viewing the Pro screen. Events are tied to a random ID for your install, not to your name or email, and contain nothing you type, say or show the camera.
Website visits
Our website counts visits anonymously so we can see which pages and links people use, such as the App Store and Google Play buttons. It records the page, the referring site, your browser and device type and an approximate location from your IP address. It doesn't use cookies or store anything in your browser, and it isn't used to identify you or for advertising.
What we don't collect
We don't use advertising SDKs, we don't track you across other apps or websites, and we don't collect your location, contacts or health data.
2. How we use information
- To create and secure your account and sign you in
- To provide Sunstir Pro and restore purchases on new devices
- To respond to support requests you send us
- To find and fix crashes and bugs, and to understand which features help people wake up
- To keep the Service safe, prevent fraud and meet legal obligations
We don't use your information for advertising, and we don't sell or "share" it as those terms are defined under California law.
3. Service providers
We use a small number of trusted providers to run the Service. They process information only on our instructions.
| Provider | Purpose | Information |
|---|---|---|
| Supabase | Account sign-in and storage | Email, name, account ID, sign-in records |
| RevenueCat | Subscription management | Account ID, subscription and purchase status |
| PostHog | Anonymous app and website usage analytics | Usage events, random install or visit ID, device model, OS and app version; on the website, pages viewed, referring site, browser and approximate location |
| Sentry (Functional Software, Inc.) | Crash and error reports | Error details, device model, OS and app version, recent in-app actions |
| Apple / Google | App distribution, payments, Sign in with Apple and Google, speech recognition where on-device recognition isn't available | As described in their own privacy policies |
| Google / jsDelivr | Downloading the on-device pose-detection model | Standard network information (such as IP address) for the download only |
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy would continue to apply.
4. How long we keep information
We keep your account information while your account is active. When you delete your account, we delete your account information within 30 days, except where we must keep limited records to comply with law or resolve disputes. Purchase records are kept by Apple and Google under their own policies.
5. Deleting your account and your choices
- Delete your account: in the app, go to Settings → your account → Delete account. This permanently deletes your account. If you subscribe, also cancel in your App Store or Google Play settings, since deleting your account doesn't cancel billing.
- Permissions: turn camera, microphone, photos, motion or notification access on or off anytime in your phone's settings.
- Contact us: email privacy@sunstir.app to ask for a copy of your information, a correction or deletion.
6. Your privacy rights
Depending on where you live, including the EU, UK and US states such as California, you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We won't discriminate against you for using these rights. To make a request, email privacy@sunstir.app. We may need to verify your identity first. You can also complain to your local data protection authority.
If you're in the EU or UK, we process account information to perform our contract with you (providing the Service), for our legitimate interests (keeping it secure) and to meet legal obligations.
7. Security
We use industry-standard measures to protect your information, including encryption in transit and access controls. No system is perfectly secure, but we work to protect your information and will notify you if required by law.
8. International transfers
We and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
9. Children
Sunstir isn't directed to children under 13 (or the minimum age in your country), and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.
10. Changes to this policy
We may update this policy from time to time. We'll change the effective date above and, for significant changes, let you know in the app or by email.
11. Contact us
Demand Generation LLC
1201 W Peachtree St NW, 2625-833027
Atlanta, GA 30309, USA
privacy@sunstir.app