The short version
sunchat stores your voice notes on secure servers so they can be delivered to your partner as an alarm. We don't sell data, we don't run ads, and we don't train models on anything you record. Your voice notes are only ever heard by you and your paired partner. Read on for the details.
1 · What we collect
Account information
When you sign up, we collect the identifier you sign in with — your Apple ID (via Sign in with Apple) or your email address (via magic link) — along with the display name you choose. Your display name is visible to your paired partner.
Pair metadata
We store who is paired with whom, when the pairing started, and the time zone each device is set to. This is the minimum we need to deliver voice notes to the right person at the right local time.
Voice note metadata
We log when a voice note was recorded, when it was delivered to your partner's device, when it was played, and its duration. This powers the "sent / delivered / heard" delivery status indicator visible to the sender.
On-device transcription
If you enable transcription, your voice note is transcribed on your device using Apple's Speech Recognition framework. The resulting transcript text and word-level timing data are uploaded alongside the audio so your partner can read along as the note plays. Transcription is processed entirely on your device — no audio is sent to third-party transcription services.
Device information
The app stores your device model, OS version, and push notification token so we can deliver voice notes and alarm notifications to the correct device. We also log delivery diagnostic events (e.g. whether a push notification was received) to troubleshoot delivery issues.
Alarm data
We store your alarm times, days of the week, and volume preferences so your alarms can be scheduled across app restarts and device reboots via iOS AlarmKit.
2 · Your voice notes
Voice notes are stored as audio files on our servers (hosted by Supabase) so they can be delivered to your partner's device. They are transmitted over HTTPS and stored in a private storage bucket accessible only via authenticated, time-limited signed URLs.
- Access is restricted. Only you and your paired partner can access your voice notes. Access is enforced by Row Level Security policies on our database and signed URLs for audio file downloads.
- We don't train on it. Voice notes are never used for machine learning, voice synthesis, advertising, or any purpose other than delivery to your partner.
- Audio processing. Your partner's device may normalize audio volume locally (using iOS audio processing) to ensure consistent alarm loudness. This processing happens entirely on-device.
3 · How we use data
We use the data we collect to:
- Deliver your voice notes to your partner's device and schedule them as alarm sounds.
- Send push notifications when a voice note arrives or is heard by the recipient.
- Show delivery status (sent, delivered, heard) to the sender.
- Display your partner's time zone and estimated sleep status.
- Diagnose delivery failures and fix bugs.
We do not use your data for behavioral advertising, profiling, or sale.
4 · Who we share with
We share data only with the small set of providers required to run the Service:
- Supabase — cloud database, authentication, file storage, and serverless functions. Hosted in the United States.
- Apple Push Notification service (APNs) — to deliver silent and visible push notifications that wake your phone for voice note delivery and alarms.
- Apple (App Store) — to handle subscriptions and in-app purchases. We receive subscription status but never your payment details.
We do not sell personal information. We do not share data with advertisers. If we are ever acquired, your data continues under this Policy or one materially equivalent; we will notify you in-app before any transition.
5 · How long we keep things
- Voice notes — stored until you delete them or delete your account. You can configure automatic deletion after a set number of days in the app's settings.
- Voice-note metadata (timestamps, duration, delivery events) — retained for the life of your account.
- Account data — until you delete your account.
- Device sessions — updated each time you open the app; removed when you sign out or delete your account.
6 · Your rights
Depending on where you live, you have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing.
To request data export or account deletion, write to privacy@sunchat.co. We respond within 30 days.
7 · Children
sunchat is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has signed up, please write to us and we will delete the account.
8 · International transfers
sunchat's servers are hosted in the United States via Supabase. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
9 · Security
We use TLS for all data in transit, and our database provider (Supabase) encrypts data at rest. Access to voice note audio files is restricted via signed URLs with short expiration times. Row Level Security policies ensure users can only access their own data and their paired partner's shared voice notes. No system is perfectly secure — if we learn of a breach affecting your account, we will notify you within 72 hours of confirming it.
10 · Changes
If we change this Policy in a material way, we'll change the "Last updated" date and tell you in-app before the change takes effect. Smaller editorial changes (typos, clearer wording) we'll just make.