The short version
- No accounts. Sunday never asks who you are.
- Your notes stay on your device. We never receive them.
- We collect anonymous usage statistics and crash reports to improve the app, not what you write.
- No ads, no ad networks, no cross-app tracking. Nothing is sold or shared.
- Delete the app and your notes go with it.
Who we are
Sunday is made by Bezal Labs Inc., an Ontario not-for-profit corporation. “We” below means Bezal Labs. We are the controller of the information described here.
- Email: drew@bezallabs.com
- Post: 9772 Old Homestead Road, Pefferlaw, Ontario L0E 1N0, Canada
What stays on your device
Sunday keeps all of this on your device and doesn’t send it to us:
- Your notes: the title, text, handwriting, date, attached passages, and your highlights.
- Your preferences: the church you follow, your Bible translation, and your appearance settings.
- Cached content: sermon details, artwork, and scripture text Sunday has downloaded. This is your church’s published content, not information about you.
Nobody at Bezal Labs can read your notes, and neither can your church. Notes are included in a device backup if you use one; that backup belongs to Apple or Google and follows their terms.
What Sunday sends, and where it goes
Church and sermon content
Sunday requests churches, series, sermons, passages, and reflection questions from our content API. Those requests carry no name, email, or user identifier. Like any web request they include your IP address and basic device information, which our host records in standard server logs.
Finding nearby churches
If you tap Find churches near me, Sunday asks for your approximate location once. It is rounded to about a kilometre on your device and sent to look up churches nearby. We don’t store it, and Sunday doesn’t use your location at any other time.
Service reminders
If you turn on reminders before your church’s services, Sunday registers your device with us for push notifications: a notification token, your church, your time zone, and when you want reminding. None of it identifies you, and it stops when you turn reminders off.
Scripture text
When you open a passage, our API fetches the verses from API.Bible, a service of the American Bible Society. Only the passage reference and translation code are sent. API.Bible sees a request from our server, not from you.
Sermon video and audio
Recordings stream from wherever your church hosts them, and that host sees the request. We don’t control those providers and they aren’t covered by this policy.
Usage analytics and crash reports
Sunday uses PostHog, on their US cloud, to understand how the app is used. Events are tied to a random identifier PostHog generates for your install. It is not your name, email, Apple or Google account, or any advertising identifier. Sunday never requests the advertising identifier.
What is recorded:
- The app being opened, closed, installed, and updated.
- Which church you select, and the sermon and series titles you open.
- Which features you use, such as the sermon overview, reflection questions, replay, starting a note, or changing translation.
- Device model, operating system and app version, language, time zone, and an approximate location (country or region) from your IP address.
- Recordings of how you move through the app’s screens, with typed text and your notes masked out.
Sunday uses Sentry to report crashes and errors, so we can fix them. A report includes what went wrong, the device and app version, and the last few moments of the app’s screen before the error, with typed text and your notes masked out. Crash reports don’t identify you.
Never recorded: the contents of your notes. We record that a note was created, not what is in it. Notes never leave your device.
What we don’t do
- We don’t sell, rent, or share your information.
- No ads and no ad networks.
- No cross-app or cross-site tracking. Sunday doesn’t use the advertising identifier.
- Sunday doesn’t ask for your contacts, photos, camera, or microphone.
- Your notes are not shared with your church.
The Bezal Labs website
Two forms on this site, the church setup request and the partner request, collect what you type into them: your name, email address, church or organization, and your message. It goes to our inbox through Resend, our email provider, and is used only to reply and get you set up. It isn’t added to a mailing list or shared with anyone else.
The site is hosted on Vercel, which keeps standard server logs, and uses Vercel Analytics for aggregate page counts. Vercel Analytics sets no cookies, and the site sets no advertising or tracking cookies.
How long we keep things
- Notes and settings: on your device until you delete them or remove the app. We hold no copy, so we can’t delete or restore them for you.
- Reminder registrations: until you turn reminders off.
- Analytics and crash reports: kept by PostHog and Sentry while useful for improving Sunday, within their own retention limits.
- Emails and form submissions: kept until we no longer need them, and deleted on request.
- Server logs: kept briefly by our hosts for security and debugging.
Children
Sunday is a general-audience app made for teenagers and adults, and isn’t directed at children under 13. It has no messaging, no profiles, and nothing you write is shown to other people. We don’t knowingly collect personal information from children under 13. Sunday has no accounts and no way to submit personal information in the app. If you think a child sent us something through one of our forms or by email, email us and we’ll delete it.
Your choices and your rights
- Delete one note: delete it in My Notes.
- Delete everything on your device: remove Sunday. Notes, settings, and cached content go with it.
- Ask what we hold, or ask us to delete it: email us. Without an account there is usually nothing that identifies you, but we’ll check our email, form submissions, and analytics.
Depending on where you live, such as Canada under PIPEDA, the EEA or UK under the GDPR, or a US state with its own privacy law, you may have rights to access, correct, delete, or object to how your personal information is handled. We honour those requests wherever you live. Write to drew@bezallabs.com.
Where your information is handled
We are in Ontario, Canada. The services we rely on are based in the United States: Supabase for our database, Vercel for hosting, PostHog for analytics, Sentry for crash reports, Resend for email, and API.Bible for scripture text. Using Sunday means the information described above is processed there.
Security
Everything Sunday sends to us is encrypted in transit with HTTPS. Access to the data we hold is limited to the people who need it to run Sunday.
Changes to this policy
When the app changes, this page changes with it. We update the date at the top for any meaningful change.
Contact
Questions or requests about any of this go to drew@bezallabs.com. For general help, see the support page.