Privacy

Your email address, so you can sign in. If you sign in with Apple, Apple gives Sunday7 your name (the first time only) and either your email or a private relay address that forwards to it, and Sunday7 keeps a token from Apple so it can cancel your Apple sign-in when you delete your account. Your name and username. Your timezone, so your week drops at 7 pm where you are.

The photos, captions and songs you add to a week. Drafts are private to you until you share them. Shared weeks are visible only to the Circles you chose, and only to members who have shared their own week. Sunday7 itself looks at something only when it’s reported, when the law requires it, or to fix a problem you’ve asked about. Text you post is checked automatically against a list of banned words before it’s saved.

Comments, stickers and award votes in your Circles. A sticker you put on a friend’s photo shows your name to that Circle, and a crown, ribbon or 😂 you place is your vote, so your Circle can see it. Vote totals are shown once voting closes.

If you turn on notifications, a token for that device. It’s used to send you Sunday7’s notifications and nothing else.

Which version of these terms you agreed to, and when.

Also: your profile photo, if you add one; the Circles you start or join, who added you, and invites waiting for you; dares you suggest and vote on; photo descriptions; people you block; reports you send; when you joined and last signed in; for browser notifications, the name of your browser; a count of how many contacts you’ve checked; which reminders were sent to you; and records of any moderation of your content. People in your Circles see your name, username, photo and timezone.

When something breaks, a report of what went wrong (the error, the screen and the kind of device), never who it happened to. If you write to us, through the support form or hello@sunday7.app, your message and address, to answer you. Like any website, Sunday7’s hosts log the IP address and device of each request, to keep the service running and secure.

No ads. No tracking across other sites or apps, and nobody else tracks you through Sunday7 either, so a browser’s Do Not Track signal changes nothing here. We don’t sell your data, and we don’t share it with anyone for advertising. No public profiles, no discover feed, no strangers.

Photos are read from your library only when you pick them. Sunday7 never scans your camera roll.

Sunday7 doesn’t ask for your date of birth and doesn’t keep one. Nothing in Sunday7 analyses faces.

When the sign-up box appears, Sunday7 looks at which country your connection comes from (in the US, which state), your phone’s time zone and, in the app, your App Store country, to show the rules where you are (14 in Canada, 16 in Australia, 18 in Nebraska, and not yet open in Tennessee or Mississippi). None of it is kept.

In Australia, Sunday7 asks Apple one thing: whether you’re 16 or over, and whether Apple has checked it. Apple asks you first whether to share it. Sunday7 keeps nothing from the answer.

Three cookies and a few small notes on your phone, each there because the app needs it or because you asked for it. None of them follow you anywhere, so there’s nothing to opt out of.

Your sign-in — a cookie that keeps you signed in. Where you were going — if you open a link while signed out, a cookie remembers that screen for an hour so signing in takes you there. Light or Dark — a cookie that remembers your choice, set only if you make one.

On your phone: your email address, to fill in the sign-in box (it goes when you delete your account); which weeks you’ve opened, so each is revealed once; whether you’ve muted songs; and which notices you’ve closed. A note for the Back button is forgotten when you close the tab.

Sunday7 also keeps a copy of its own images and code on your phone so it opens quickly. Your photos aren’t in it.

If you use Find friends, your phone asks which contacts to share and you choose which ones. Their email addresses go to Sunday7 to check which ones already have an account, the answer comes back, and the addresses aren’t kept. Nobody is emailed because you looked.

This also works the other way: someone who already has your email address can use Find friends to see that you’re on Sunday7, with your name and username. Nothing else about you is shown.

Sunday7 runs on Supabase (database and photo storage), Vercel (the website) and Resend (email delivery). Cloudflare runs the check on the sign-in page that keeps bots out; it sees your device and connection, not your account. Notifications are delivered by Apple’s push service, or your browser’s, and Apple also handles Sign in with Apple if you use it. Each one gets only what it needs to do that job, under a written agreement that requires it to protect your information at least as well as this page says Sunday7 does. Cloudflare also uses what its check sees to get better at spotting bots.

Song search goes through Apple’s public catalogue, from Sunday7’s server rather than your phone. When you pick a song, or open a week that has one, though, the album art and the preview load from Apple directly, so Apple sees that a device asked for them. Nothing tells Apple who you are.

Sunday7’s servers are in the United States. If you live in Canada, Australia or New Zealand, your information is stored and processed there, and the companies named above may have to give access to it under US law.

Everything travels encrypted. Photos are in private storage that only your chosen Circles can open, and the database checks who’s asking on every request. Only the founder can reach Sunday7’s systems.

Sunday7 will hand over information when the law makes it: a valid court order or legal process, or a report to the National Center for Missing & Exploited Children, which the law requires if we come across apparent child sexual abuse material, or an adult trying to draw a minor into sexual contact or trafficking. We don’t hand anything over just because someone asks.

Your weeks, photos, comments and votes stay until you remove them or delete your account. Sunday7 doesn’t expire your archive — looking back is the point.

Reports, and a record of any action taken on one, are kept after they’re dealt with. If you delete your account, a report you sent stays but no longer says it was you, because it’s a record about someone else. Reports about you, and records of any moderation, are kept after your account is deleted too, so we can show what was done and why.

Notification tokens: until you turn notifications off, sign out, or the device stops accepting them. Error reports: 30 days. Messages you send us: as long as we need them to help you and keep a record. Our hosts’ request logs: the short periods their own services keep them.

The weekly ones are two at most: Sunday at 7 pm when everyone’s week drops, and a last call on Monday if you haven’t posted. If someone adds you to a Circle and Sunday7 can’t reach you with a notification, you’ll get an email about that too. And if Sunday7 removes something of yours or acts on your account, you’ll get an email saying what happened, why, and how to appeal. That one doesn’t depend on the setting, because it’s about your account; the only time it won’t come is if the law requires us not to tell you. Every one has a one-click unsubscribe, and your mail app may show its own Unsubscribe button too. Either works without signing in — which matters if the reason you want out is that you can’t get in. Or turn them off in Settings.

Sign-in links always come. You need those to get in, and they only arrive because you just asked for one.

You need to be 13 or older to use Sunday7 (14 in Canada, 16 in Australia). If we learn an account belongs to someone younger, we delete it.

If you’re a parent and your child under 13 has an account, email hello@sunday7.app with their username or the name of their Circle. We’ll delete the account and everything in it, and we won’t ask you for ID.

If you’re under 18: you can delete anything you’ve posted (a photo, a week or a comment) from where it appears, or delete your whole account in Settings. That takes it off Sunday7, but anyone who already saved or screenshotted it may still have a copy.

You can see, correct, download and delete what Sunday7 keeps about you at any time, in Settings, or ask by email at hello@sunday7.app. We answer within 20 working days. Some of it is in Download my data; ask by email for the rest.

You can withdraw your consent at any time: turn off notifications or emails in Settings, stop using a feature, or delete your account, which ends everything Sunday7 does with your information. Withdrawing doesn’t undo what was lawfully done before.

The person in charge of protecting personal information at Sunday7 is the founder of Vessa Technologies LLC, at hello@sunday7.app. Our postal address is on the copyright page.

If our answer doesn’t satisfy you, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information; in Australia, the Office of the Australian Information Commissioner; in New Zealand, the Privacy Commissioner.

Take a copy first, if you like. In Settings, Download my data gives you one file with your profile, every week and caption, links to your photos, your comments, stickers and votes, the dares you suggested and the reports you filed.

Leave any Circle from its screen. To delete your account and everything in it — weeks, photos, comments, memberships — go to Settings and choose “Delete my account”. It happens immediately and can’t be undone. A Circle you started stays for the people still in it, and passes to its longest-standing member.

One exception, and it’s rare. If the law requires us to preserve something — a report to the authorities about child sexual abuse material is what this exists for — the photos and messages involved are kept for as long as the law requires, where nothing in the app can reach them. Your account still goes immediately and completely.

Can’t sign in? Email hello@sunday7.app from the address you signed up with and ask to be deleted. Support says how.

If this page or the Terms change in a way that matters, you’ll see it in the app the next time you open it, and the date below changes.

Sunday7 is operated by Vessa Technologies LLC, Richardson, Texas.

hello@sunday7.app

Effective 1 October 2026.