Your family’s story is yours.

Effective: July 29, 2026 · Updated: October 17, 2026 · SUNWARD LLC, Florida, USA

Updated October 17, 2026: we now say how long our AI provider keeps what we send, when its safety staff may review a message and that it may process messages outside the United States. We corrected two sentences about screenshots and marketing email. How we handle your data did not change. Updated October 7, 2026: we clarified the encryption transition, AI context, exports and retained operational records. Marketing email now requires an explicit choice and can be stopped without signing in. Browser analytics and error reports omit sensitive arrival URLs. Website advertising loads only after the privacy gate permits it. Updated October 5, 2026: your key. Your history is now locked with a key that only you hold, starting the next time you sign in. Sunward stores only the locked version and has no key to it. We rewrote sections 1, 2, 3, 4, 5, 6 and 7 to say what that changes: what we can still see, how you unlock your history, what happens if you lose your key, what a court can get from us and how your export works. Earlier on October 5, 2026: we now say exactly what happens to your words today. We explain how our AI provider handles your words. We spell out what each message to Sol sends, what we encrypt ourselves and what relies on our providers’ protections, what the in-app export includes, the 30-day window after you delete your account and when the law can require us to share data. We also added Paperwork, Calendar and the crisis check that runs on each message. Some of this was missing before or said too broadly. We fixed the words; how we handle your data did not change. July 29, 2026: we now describe our service providers by the job they do rather than by company name (the two advertising tools on our public website are still named, in section 3); we state plainly that “never used for advertising” means your family’s data, which is what we always meant; and we added how we treat “Do Not Track” and cross-site advertising cookies. Nothing we collect, share, or keep is changing.

This policy explains what SUNWARD LLC (“Sunward,” “we”) collects when you use getsunward.com, app.getsunward.com, and Sol, why we collect it, who touches it, and the control you keep. Sunward exists because one family’s private messages needed a safe place to become wisdom. Privacy isn’t a compliance page for us; it’s the founding condition.

The three vows: we never sell your data · we never use your family’s data (your conversations, your child’s information, anything you tell Sol) for advertising · we never use your conversations to train AI without your separate, explicit opt-in (off by default).

1. What we collect

Encryption rollout. Parent-held encryption is being introduced in stages. The descriptions of history locked with your key below apply after you complete key setup and move your history. Until then, Sunward can read the records stored for your account. Earlier readable copies remain for 7 days after migration or longer under a legal hold. Older backups expire under the database provider’s retention schedule. Section 6 explains the transition.

Plain English: your account email, what you choose to tell us about your family, your conversations with Sol, any real message threads you choose to add, and basic technical logs. Screenshots of message threads you add are read on your own device and never reach us. Documents and photos you add to Paperwork are read once by our AI provider and not kept. The website quiz is not stored.

Account data: email address and authentication credentials (hashed), subscription status.
Family profile you provide: each child’s first name, age, and the context you share (e.g., what you love about them, what’s happening). You choose how much to share; first name only is fine.
Conversations & content: your messages with Sol and the drafts you work on together, including what you write when you vent. We keep a running memory for each child. After you complete parent-held key setup, messages and memory are stored locked with your key. Earlier conversation summaries may remain only during the transition described in section 6. We do not keep new readable conversation summaries for history locked with your key.
Conversations you choose to add: if you use “Add a conversation,” you can show Sol screenshots of real messages between you and your child so it understands how the two of you actually talk. The reading happens on your own device: the screenshots are converted to text in your browser or phone and are never uploaded to us. You review what was read and choose which messages to include. Only the text you approve is sent. Our AI provider reads it to build or update a short coaching profile. The profile describes how the two of you talk so Sol can coach you. It is not an assessment of your child. After that, the profile and the most relevant excerpts go along with your later messages to Sol. We store the text and the profile locked with your key (see section 6). We never store the images. We never keep phone numbers, contact identifiers, message IDs, photo metadata or per-message timestamps. We keep only who said what and the rough date range of the conversation. You can delete any added conversation at any time (see section 5).
Paperwork and calendar (if you use them): if you add a document such as a parenting plan or a school calendar, Sol reads it once through our AI provider. We do not keep the file. We keep Sol’s short note about it and the dates it found, locked with your key. Each date itself (just the day, with no description) stays readable to Sunward so reminders can be sent. If you turn on date reminders, the email never names the event. If you ask Sol to look up your child’s school calendar, the school name you type is sent to our AI provider, which searches the web for the school’s public calendar. We keep only the dates it finds, never the school name. If you paste a team calendar link, our server opens it once to read the dates and does not keep the link.
Technical data: IP address, device/browser info, and service logs needed for security and reliability, plus privacy-friendly analytics about which screens you use (never message or child content), which you can turn off in the app.
What we do NOT collect: the public website quiz is processed in your browser and its answers are not stored or transmitted; we don’t collect data from children (the Service is for adults); we don’t buy data about you from anyone.

2. How we use it

Plain English: to run Sol for you, keep the lights on, and nothing sneaky.

To provide the Service, each reply sends your message with the context Sol needs: your child’s profile, including name, age or date of birth, what you love about them, family circumstances and any court-order answer you supplied; Sol’s memory for that child; recent messages from the current room; relevant recent lines from other rooms; visit facts; coaching profiles and relevant excerpts from conversations you added; and results your device finds when searching your history. Our servers add Sol’s instructions, research notes and writing examples before sending the request to our AI provider. For history locked with your key, readable context passes through our servers in memory. Your message and Sol’s reply are locked before storage. Your device may also send recent messages so Sol can update its memory, which is locked before storage.
To keep you safe, our AI provider checks messages for signs of crisis so resources can appear. It reads the new message with a few recent turns. We keep no message content in the crisis-check record. We record whether the check found a possible or clear signal, whether resources appeared and whether the check was unavailable.
To operate and secure the Service: authentication, fraud/abuse prevention, debugging, and payment processing.
To communicate with you: account emails (confirmations, receipts, security alerts, trial and billing notices). Optional marketing email is sent only if you choose to receive it. Every one has a one-click unsubscribe.
To determine approximate country and state, our server sends the caller’s IP address to a geolocation service. In the app this helps show location-dependent disclosures. On the public website it also determines whether advertising measurement is allowed. The lookup does not send family content.
Product learning (future, off by default): if we ever offer features that learn from user content across accounts, participation will be a separate, explicit opt-in with its own consent, never buried in an update.

3. Who touches your data

Plain English: a small set of service providers, each doing one job, plus the two advertising tools we use to measure marketing on our public website. No data brokers. The advertising tools never run inside the app.

We use service providers in these categories. Each one may use your data only to do its job for us, except that our AI provider may also retain and review flagged content to enforce its own safety policies, as described below. Each one must protect your data at least as well as this policy does.

Hosting and infrastructure: running the Service, and its security and reliability logs.
Database and authentication: your account plus the locked version of your family profile, conversations, Sol’s memory and everything else you save, isolated per account by row-level security.
AI processing: generating Sol’s coaching, building coaching profiles from conversations you add, reading Paperwork documents and checking each message for crisis language so crisis resources appear. See below for how our AI provider handles your words.
Payments: subscription billing. We never see or store full card numbers.
Transactional email: account, security, trial, and billing messages.
Error monitoring and product analytics: usage counts and error reports help keep the Service working. App usage is linked to your account identifier. We exclude message and child content. You can disable browser or device usage and crash reporting under Privacy & data on the web or You on iPhone. This choice is per browser or device. Server security and error monitoring remains active.

Additional services: country/state lookup, font delivery on public pages and email templates, mobile text-recognition software and billing integration, model distribution and public school/team calendar hosts. Network requests to these services can reveal an IP address and technical request details. They do not receive your message history except where AI processing is described above.

Our AI provider. Sol’s replies are generated by a third-party AI service provider. Here is what that means for your words:

What it receives: to produce a reply, the provider processes your message and the context listed in section 2. When Sol reads a conversation or document you add, the provider processes that text too.
How long it keeps it: our AI provider generally deletes what we send within 30 days. If its automated safety systems flag a message, it may keep that message for up to 2 years and its trained safety staff may review it. It may also keep data longer when the law requires it. If it detects apparent child sexual abuse material or a child at imminent risk, it may report that to authorities on its own.
How it may use your words: the provider uses what we send to produce Sol’s replies. Our agreement with it limits what else it may do with them.
No sale, no ads: we never sell your words or use them for advertising, whichever provider runs Sol.
Deleting your account erases what we hold (see section 5). It cannot reach copies the provider may still have; those expire under our agreement with the provider.

Advertising measurement, public website only. We use Google and Meta advertising tools on getsunward.com to measure our marketing: page views and ad-conversion events, for U.S. visitors who have not opted out. They never run inside the app, and they never receive your messages, your email, or any information about your child. Because these are third-party advertising cookies, Google and Meta may recognise the same browser on other websites and build a picture of activity over time and across sites; that is what they are for, and it is why we let you switch them off. You can opt out any time with the Your Privacy Choices link in the footer of every page, and we honour the Global Privacy Control browser signal automatically.

Reading added conversations. Screenshots are read on your own device and never uploaded. The browser uses locally hosted text-recognition code and language files. The iPhone app uses a mobile text-recognition library on-device. Our servers run the search-index model. Model distribution hosts may provide code or weights; they do not receive your conversation text. Only the text you approve reaches our AI provider to build the coaching profile and answer your messages.

We share data beyond these categories only if required by law (e.g., a valid subpoena), to protect safety, or as part of a corporate transaction (in which case this policy still binds the data).

Legal requests. Your conversations with Sol are not privileged the way a conversation with your lawyer can be. Once your history is locked with your key, Sunward can’t read what it says, so we can’t produce it. What we can still read, we can be required to produce: your account and billing details, when each message was sent, whether you or Sol wrote it, which part of Sunward it was in plus the calendar dates described in section 1. For the crisis check, that means whether the check fired and how strong the sign was (possible or clear), never your words. History not yet locked, earlier readable migration copies retained for 7 days or under a hold (see section 6), backups made before key setup (see section 5) plus the one training account may be readable. A legal request can require review and production of those records. The standard sealed-history production tool exports metadata and ciphertext; retained readable copies require separate review. Our AI provider may also hold recent messages for a limited time (see above). Legal process can be sent to it directly.

Your words can still reach a court in other ways. You can be ordered to produce them yourself. A device you have unlocked can be examined if a court orders it. Anyone you have shown or sent your messages to can be asked for them too.

If you are in a court case or expect one, you may have a legal duty to keep your records. That duty is yours. While it applies, do not delete your account, forget your devices or throw away your recovery code. Once your key is gone, nobody can recover your history. A court can treat that loss as destroying evidence. The in-app export (section 7) gives you a copy to keep.

When a request arrives, we check that it is valid, produce only what it requires and tell you unless the law forbids it. If a litigation hold applies to your account, we keep the affected data until the hold ends, even if you ask us to delete it. A hold preserves records that already exist, including earlier readable copies retained during migration. Records stored only under your key remain locked. A hold does not give Sunward that key. It does not replace your own duty to keep your records.

4. Your children’s information

Plain English: you tell us about your children; they never use Sunward. We treat that information as the most sensitive thing we hold.

The Service is for adults. We do not knowingly collect information directly from children under 13 (or any minors). The app is not directed at them. Information about your children exists in Sunward only because you, the parent, chose to share it for coaching purposes. It is locked with your key like the rest of your history, protected by row-level security (no other account can reach your family’s rows) and used only to coach you. It is deleted with your account, as described in section 5. Share only what’s needed: a first name is enough.

5. Retention & deletion

Plain English: we keep it while you use Sunward. Delete your account and we erase it after a 30-day window in case you change your mind. Copies in provider backups expire under their retention schedules.

Conversations you added: you can delete any one of them at any time, on its own, without deleting your account. Deleting one removes the transcript, its search index, and the coaching profile built from it, right away rather than on a schedule. Sol stops drawing on that conversation entirely. Your past coaching chats and memory stay in your history. Removing an added conversation does not rewrite earlier coaching. Account deletion removes those records after the recovery window unless a legal hold applies.

Paperwork: you can delete any document you added. Sol’s note about it and the dates it found go with it.

We retain your data while your account is active. When you delete your account (in-app, or by emailing support@getsunward.com), it is scheduled for deletion rather than erased that instant. For 30 days you can change your mind and keep everything. After 30 days we permanently erase your profile, your children’s information, your conversations with Sol, Sol’s memory, conversations you added and Paperwork. Erasing your account also deletes every copy of your key that we store. Deleting the active account does not immediately remove older provider backups or copies you saved yourself. If you are in a court case, deleting your account may affect records you are required to keep. Talk with your lawyer before you delete. The one exception is a litigation hold: if valid legal process requires us to preserve your account, we keep the affected data until the hold is released. We erase it after that.

Copies held elsewhere expire under the applicable service’s retention schedule. Our AI provider may retain submitted text for safety, abuse prevention or legal obligations. Database backups made before key setup may contain readable history until those backups expire. Account deletion also leaves some operational records: security and deletion audit trails, legal-production records, payment records, website waitlist entries and service-provider delivery or usage logs. We retain these only for the operational or legal purpose that requires them. You can separately request removal from the waitlist. Payment records required for accounting or tax obligations may be retained.

6. Security

Plain English: your history is locked with a key that only you hold. We store the locked version and can’t open it. Sol still reads each message you send so it can answer you. If you lose every way to unlock it, nobody can get it back, including us.

Locked with your key. Your conversations with Sol, your children’s profiles, Sol’s memory, conversations you add and Paperwork notes are encrypted with a key that only you hold. Sunward stores only the locked version and has no key to it. Nobody at Sunward can read them. A leak of our database would not expose them. Each calendar date (just the day, with no description) stays readable so reminders can be sent.

How you unlock it. You can unlock with a supported web passkey, where available. On iPhone, Face ID, Touch ID or your device passcode protects the key saved on that device. A device you have already unlocked: it stays unlocked until you choose “Forget this device.” Your recovery code. You can also link a new device using the device-link instructions on one that is already unlocked. You have one recovery code: 24 characters, shown once when you set up your key. After you use it to unlock, the app makes you a new one right away. Your old code keeps working until you save the new one. You can make a new code any time in Settings. Anyone who can use a device you have unlocked can open your history on it, so keep your devices locked.

If you lose your key. If you lose every device, every passkey and your recovery code, nobody can recover your history. That includes Sunward. We can’t reset it for you. Keep your recovery code somewhere safe, such as a printed copy or a password manager.

What Sol still reads. To answer you, Sol reads each message as you send it, with the context your device sends along (see section 2). Those words pass through Sunward’s servers in memory only and are never saved there in a form we can read. They also go to our third-party AI service provider, as section 3 describes. So your key protects what we store. It does not change what happens to each message on its way to Sol.

When you first set up your key. If you used Sunward before keys existed, your device locks your existing history the next time you sign in. Until then it stays as it was, in a form Sunward can read. Once your device has locked it and checked that every item made it across, we keep the older readable copy for 7 days in case something went wrong. Then we erase it, unless a litigation hold requires us to keep it longer (see section 5).

One training account. One founder account may be enabled for training with its owner’s separate consent. Sunward keeps a backup copy of that account’s key so it can read that account. Every read is logged with its purpose. Turning this on takes an admin switch plus the owner’s own confirmation in the app. No other account is a training account. If that ever changes, we will update this policy first.

Data is also encrypted in transit (TLS) and on disk by our infrastructure providers. Database access is governed by row-level security so accounts are isolated from each other. Two-factor authentication is available on your account. We recommend turning it on.

No system is perfectly secure; if a breach affects your data we will notify you as the law requires and as decency requires.

7. Your rights & choices

Plain English: see it, fix it, take it, delete it, right in the app.

Access, correct, export or delete your data in the app. For history locked with your key, export runs on your device because Sunward cannot open that history. Before key setup, export may be prepared on our server. You can email support@getsunward.com from your account email for help with account details.
The in-app export includes your account profile, children’s details, conversations with Sol, Sol’s memory, imported conversation summaries and transcripts, your saved “I’m Here” history and Calendar notes with their dates. An export fails if required records cannot be loaded or opened. Conversation summaries are included where retained for an account that has not moved to parent-held keys.
Opt out of non-essential emails with one click; account/security emails can’t be disabled while your account exists.
Turn off browser or device usage and crash reporting under Privacy & data on the web or You on iPhone. Server error monitoring remains active. The public website uses cookieless page counts and separate advertising measurement. Advertising can track a browser across sites and is controlled by Your Privacy Choices and Global Privacy Control.
Depending on your state (e.g., California), you may have additional statutory rights. We honor access/deletion/portability requests for everyone, regardless of state, so you don’t need to cite a statute.
On our public website only, we use Google and Meta cookies to measure advertising, which some state laws treat as “sharing” personal information for cross-context advertising. You can opt out any time with the Your Privacy Choices link in the footer of every page, and we automatically honor the Global Privacy Control browser signal. Inside the app we never do this: no advertising cookies, and no sharing.
Do Not Track: your browser may offer a “Do Not Track” setting. There is no common industry standard for what a site should do in response, so we do not respond to Do Not Track signals. We do honor the Global Privacy Control signal, as described above.

8. Where the Service operates

Sunward is operated from the United States and currently offered to U.S. users (excluding Illinois, Washington, and Nevada at launch). We store your data in the United States. To write Sol’s replies, our AI provider may process your messages on servers outside the United States.

9. Changes

If we make material changes to this policy, we’ll post the updated policy here with a new effective date, and notify account holders by email or in-app before the changes take effect.

10. Contact

Privacy questions or requests: support@getsunward.com · SUNWARD LLC, Florida, USA. A human reads these.