Your family’s story is yours.

Effective: July 24, 2026 · SUNWARD LLC, Florida, USA

This policy explains what SUNWARD LLC (“Sunward,” “we”) collects when you use getsunward.com, app.getsunward.com, and Sol, why we collect it, who touches it, and the control you keep. Sunward exists because one family’s private messages needed a safe place to become wisdom. Privacy isn’t a compliance page for us; it’s the founding condition.

The three vows: we never sell your data · we never use it for advertising · your conversations are never used to train AI for other users without your separate, explicit opt-in (off by default).

1. What we collect

Plain English: your account email, what you choose to tell us about your family, your conversations with Sol, and basic technical logs. The website quiz is not stored.

Account data: email address and authentication credentials (hashed), subscription status.
Family profile you provide: each child’s first name, age, and the context you share (e.g., what you love about them, what’s happening). You choose how much to share; first name only is fine.
Conversations & content: your messages with Sol, drafts, and documents you upload (e.g., parenting plans) for the features you use.
Technical data: IP address, device/browser info, and service logs needed for security and reliability, plus privacy-friendly analytics about which screens you use (never message or child content), which you can turn off in the app.
What we do NOT collect: the public website quiz is processed in your browser and its answers are not stored or transmitted; we don’t collect data from children (the Service is for adults); we don’t buy data about you from anyone.

2. How we use it

Plain English: to run Sol for you, keep the lights on, and nothing sneaky.

To provide the Service: your profile and conversation context are sent to our AI provider to generate Sol’s coaching, and stored so Sol can pick up where you left off.
To operate and secure the Service: authentication, fraud/abuse prevention, debugging, and payment processing.
To communicate with you: account emails (confirmations, receipts, security) and, only if you opt in, the daily Turn email, which you can stop with one click.
To meet legal-notice requirements: we use your IP address to determine your approximate location (state) so we can show any legal disclosures your state requires. Your IP is not stored for this purpose, and this location is never used for advertising or tracking.
Product learning (future, off by default): if we ever offer features that learn from user content across accounts, participation will be a separate, explicit opt-in with its own consent, never buried in an update.

3. Who touches your data (subprocessors)

Plain English: a short list of infrastructure companies, each doing one job, plus the two advertising tools we use to measure marketing on our public website. No data brokers. The advertising tools never run inside the app.

Provider	Job	Data involved
Supabase	Database & authentication	Account, profile, conversations (row-level security enforced)
Anthropic	AI processing (Sol’s intelligence)	Conversation context per request; not used by Anthropic to train models per our API terms
Render	Hosting	Service traffic and logs
Sentry	Error & crash monitoring (website and app)	Error messages, stack traces, and (on the website) your account ID. Crash reports from the app are not linked to your identity. Not your messages, email, child information, IP address, or cookies: automatic personal-data collection is switched off and request contents are stripped before anything is sent.
PostHog	Product analytics	Which screens and pages get used, tied only to your account ID. Screen paths are stripped of identifiers first, so a child’s name or ID is never sent; no message content, child information, session recording, or advertising/cross-app tracking is collected. You can turn this off in the app: Settings → Help improve Sunward.
Plausible	Privacy-friendly web analytics	Cookieless, aggregate page-view counts with no personal data and no cross-site tracking. Inside the app, only identifier-stripped page paths are sent.
Google (Tag Manager & Ads)	Marketing measurement on our public website only	Page views and ad-conversion events on getsunward.com, for U.S. visitors who have not opted out. Loaded only through consent-gated Tag Manager. Never runs inside the app, and never receives your messages, your email, or any information about your child.
Meta	Marketing measurement on our public website only	Page views and ad-conversion events on getsunward.com, for U.S. visitors who have not opted out. Never runs inside the app, and never receives your messages, your email, or any information about your child. We do not send Meta any sensitive or health-related information.
Resend	Transactional email	Your email address, email content we send you
Google Workspace	Our company email	Messages you send to us
Stripe	Payments & subscriptions	Your email, subscription status, and payment details (we never see or store full card numbers)

We share data beyond this list only if required by law (e.g., a valid subpoena, and we’ll notify you unless legally barred), to protect safety, or as part of a corporate transaction (in which case this policy still binds the data).

4. Your children’s information

Plain English: you tell us about your children; they never use Sunward. We treat that information as the most sensitive thing we hold.

The Service is for adults. We do not knowingly collect information directly from children under 13 (or any minors), and the app is not directed at them. Information about your children exists in Sunward only because you, the parent, chose to share it for coaching purposes. It is protected by row-level security (only your account can reach your family’s rows), used only to coach you, and deleted with your account. Share only what’s needed: a first name is enough.

5. Retention & deletion

Plain English: we keep it while you use Sunward; delete your account and it goes.

We retain your data while your account is active. When you delete your account (in-app, or by emailing support@getsunward.com), your profile and conversations are deleted from production within 30 days, and from encrypted backups within 90 days. We may retain minimal records we’re legally required to keep (e.g., billing records for tax law).

6. Security

Plain English: encryption in transit, locked-down database rows, least-privilege keys, and honesty if anything ever goes wrong.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Database access is governed by row-level security so accounts are isolated from each other. Two-factor authentication is available on your account, and we recommend turning it on. Secrets are stored with restricted permissions and rotated. No system is perfectly secure; if a breach affects your data we will notify you promptly as the law requires, and as decency requires.

7. Your rights & choices

Plain English: see it, fix it, take it, delete it: just ask.

Access, correct, export, or delete your data: in-app where available, or by emailing support@getsunward.com from your account email.
Opt out of non-essential emails with one click; account/security emails can’t be disabled while your account exists.
Turn off analytics and crash reporting in the app: Settings → Help improve Sunward. On the website these are privacy-friendly and non-tracking by design (see the subprocessors list above).
Depending on your state (e.g., California), you may have additional statutory rights. We honor access/deletion/portability requests for everyone, regardless of state, so you don’t need to cite a statute.
On our public website only, we use Google and Meta cookies to measure advertising, which some state laws treat as “sharing” personal information for cross-context advertising. You can opt out any time with the Your Privacy Choices link in the footer of every page, and we automatically honor the Global Privacy Control browser signal. Inside the app we never do this: no advertising cookies, and no sharing.

8. Where the Service operates

Sunward is operated from the United States and currently offered to U.S. users (excluding Illinois, Washington, and Nevada at launch). Your data is processed and stored in the United States.

9. Changes

If we make material changes to this policy, we’ll notify you (email or in-app) at least 14 days before they take effect, with a plain-language summary of what changed and why.

10. Contact

Privacy questions or requests: support@getsunward.com · SUNWARD LLC, Florida, USA. A human reads these.