Privacy Policy

Information we access

When you sign in with Google, Sunrise accesses your Google Calendar and Google Tasks data as authorized by you through Google's OAuth consent screen. This data is used solely to display, create, update, and delete your events and tasks within the app.

How data is stored

Your calendar events and tasks remain in your Google account. Sunrise does not maintain a separate copy of your calendar or task data on our servers. Data flows directly between your device and Google's APIs.

To support offline use and faster loading, Sunrise may temporarily cache calendar events and tasks on your device for up to 24 hours. This local cache is stored only on your device and is cleared when you sign out or revoke Sunrise's access.

Authentication tokens are stored locally on your device or browser to keep you signed in between sessions. On mobile devices, tokens are stored in the operating system's secure storage (iOS Keychain or Android EncryptedSharedPreferences). On the web, tokens are stored in your browser's local storage.

Data protection and security

Sunrise treats your Google Calendar and Google Tasks data as sensitive. Security procedures are in place to protect the confidentiality of your data. We use encryption and other safeguards as described below.

• Encryption in transit. All communication between Sunrise and Google APIs, and between Sunrise and our own services, uses HTTPS/TLS. Your calendar and task data is never transmitted over unencrypted connections.
• Protection at rest. On mobile devices, OAuth tokens are stored in the operating system's secure storage, which encrypts data at rest. On the web, tokens and cached data are stored locally in your browser and are protected by your device's security settings. Our billing database stores only your Google account identifier and email address for subscription management; it does not store calendar or task content.
• Access controls. Sunrise can access your Google data only after you explicitly authorize it through Google's OAuth consent screen. You can revoke that access at any time from your Google Account permissions page.
• Scope minimization. Sunrise requests only the Google API scopes needed to display, create, update, and delete your calendar events and tasks.
• Limited server access. Our billing service may receive your Google access token transiently to verify your identity when you manage a subscription. We do not store OAuth tokens on our servers.
• Limited use. We use Google user data only to provide and improve the calendar and task features visible in the Sunrise app. We do not use Google user data for advertising, data brokerage, or any purpose unrelated to the app's core functionality.

What we do not do

• We do not sell your personal information.
• We do not use your calendar or task content for advertising.
• We do not share your data with third parties except as required to operate the service.

Analytics

We may use privacy-friendly analytics on getsunrise.today to understand how visitors find and use our marketing site. The Sunrise app itself does not include third-party advertising trackers.

Third-party services

Sunrise uses Google APIs for authentication and data sync. Your use of Google services is also subject to Google's Privacy Policy. Our marketing site may be hosted on Cloudflare Pages.

Data retention and deletion

Because your calendar and task data lives in Google, you can revoke Sunrise's access at any time from your Google Account permissions page. Revoking access removes Sunrise's ability to read or write your Google data.

Changes to this policy

We may update this policy from time to time. We will post the revised policy on this page with an updated “Last updated” date.

Contact

Questions about this policy? Email us at [email protected].