Note: This document is a good-faith template and is not legal advice. Have it reviewed by a privacy professional before relying on it — especially regarding GDPR and the processing of personal data in recordings.
Contents
Sunday Suite is built "local-first". The programs run on your own machine, and your content stays with you unless you choose to upload or publish it. This policy explains what is processed, where, and by whom.
1.In short
- The programs are desktop apps that store data locally on your machine.
- We run no central server that receives your recordings, videos or documents.
- Data leaves the machine only when you actively enable a cloud, publishing or alert feature.
- We collect nothing from the programs unless you opt in to anonymous quality telemetry.
2.Data on your machine
Settings, projects, recordings, video, transcripts, plans, songs and documents are stored locally in the program's data folder on your machine. You control these files and can delete them at any time.
3.OAuth tokens
If you connect a third-party account (for example Google), the access and refresh tokens are stored securely in your operating system's keychain on your machine — not with us. You can disconnect at any time, which removes the stored tokens.
4.Cloud uploads
If you enable cloud backup, the selected files are uploaded directly from your machine to your own cloud account (for example Google Drive). The files do not pass through us. Storage is governed by your agreement with the cloud provider.
5.Publishing
If you choose to publish — for example upload to YouTube or send to a podcast host via RSS — the content and necessary metadata are sent directly from your machine to the service you have chosen, on your behalf.
6.Email alerts
If a program can send you alerts (for example via your own SMTP server or a notification service), they are sent with the configuration you provide. We do not receive a copy of these alerts.
7.No analytics or telemetry
The programs contain no advertising and no tracking. We do not know what you record, show, plan or publish. Some apps offer an optional, anonymous quality telemetry — a setting that is off until you switch it on, and that never contains your content, recordings or names. The programs may also contact the suite's update service to check whether a newer version exists; such a request does not contain your content.
8.Content stays on the machine
Recording, video and transcription are processed locally. Speech-to-text (Whisper) runs on your own machine. Your content leaves the machine only when you enable a cloud, publishing or sharing feature, as described above.
9.The website sundaysuite.app
The website is an information site. If you get in touch via the email links, we process your email address and the content of your message to reply to you. The download buttons for the desktop apps look up the newest version via the suite's own update service and then redirect to the release on GitHub, served under GitHub's own privacy terms; neither request carries any personal data. If the website later offers forms or a newsletter, their use will be described here, and you will be able to unsubscribe at any time.
10.Community web tools
The free community tools in the toolbox (games and group activities on subdomains of sundaysuite.app) are designed to store as little as possible: sessions are anonymous for participants and expire after use. Two exceptions are worth knowing. SundayWelcome stores the contact details a newcomer chooses to submit so the church team can follow up; that data belongs to the church in question, and deletion can be requested at any time from the church or via [email protected]. SundayBasar never touches money — payments happen directly in Vipps between you and the organiser, and the app only records what the organiser confirms manually.
11.Third-party services
When you enable an integration, the relevant third party's privacy rules apply to that part of the processing. Examples may be Google (Drive/YouTube), a podcast host or an email provider. You choose whether and when these are used.
12.Your rights
Since most data lives locally on your machine, you have direct control and can view, change, export and delete it yourself. For personal data we may process (for example an email enquiry), you have the right under the privacy regulation (GDPR) to access, rectification, erasure and restriction. Contact us to exercise these rights.
13.Changes
We may update this policy. Material changes are notified by updating the date at the top of the page.
14.Contact
Questions about privacy? Contact the data controller Richard Fossland at [email protected].