Privacy Policy

• Account details — your name, email address, password (stored only as a secure hash), and time zone. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Your mobile number, if you choose to add one, plus the record that you verified it.
• Your reminders — the title, notes, category, dates and repeat rules you enter. Treat notes as you would a private calendar entry; we suggest not putting full document numbers there.
• Consent records — if you agree to texts and automated calls, we store the date, time and IP address of that agreement. This is required by US telecommunications rules.
• Delivery records — for every alert: which channel we used, a masked version of the destination (for example +1***1234), whether the provider accepted and delivered it, and when you confirmed. This audit trail is the product; it is how we can show what we did.
• Push subscriptions — if you enable notifications, the anonymous endpoint your browser gives us for each device.
• Technical logs — errors and performance data, with phone numbers masked and message contents excluded.

We do not use advertising or analytics cookies. The only cookie we set is the one that keeps you signed in.

To deliver the reminders you asked for, to escalate through the channels your plan includes until you confirm, to prove what we sent, to keep your account secure, and to answer your support emails. We use your email address for service messages (verification, password resets, reminder alerts, and a weekly summary you can turn off in Settings).

We send texts and place automated calls only if you gave express consent by ticking the box on the phone step; the box is never pre-ticked. Reply STOP to any text to opt out immediately and permanently for that number, or START to opt back in. Reply HELP for help. Message and data rates may apply; message frequency depends on the reminders you create. Opting out of texts and calls does not close your account — email and app notifications continue.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with anyone. Your mobile number is disclosed only to the messaging provider named below, and only so it can deliver the message you asked us to send.

We use a small number of processors, each only for the job named:

• Railway — hosting and database (United States).
• Resend — sending email.
• Twilio — sending texts, placing calls, and verifying phone numbers.
• Google — only if you choose to sign in with Google.
• Sentry — error reports, with personal data scrubbed.

We disclose information otherwise only if the law requires it. We do not sell or rent personal information to anyone, and we never share mobile numbers or SMS consent with third parties or affiliates for marketing or promotional purposes.

Account data and reminders stay until you delete them or close your account. Delivery and consent records are kept for as long as your account exists and for a period afterwards, because they are the evidence of what we sent and of your consent. Opt-out records for a phone number are kept permanently — that is what stops us texting a number that asked us not to, even if the account is gone.

You can edit or delete any reminder at any time, turn off push notifications per device, turn off the weekly email in Settings, and opt out of texts and calls with STOP. To get a copy of your data or to have your account deleted, email help@sureday.us and we will action it. Self-service export and deletion are on the way.

Traffic is encrypted in transit; passwords are hashed; confirmation links are one-time, single-purpose tokens that cannot sign anyone in; phone numbers are masked in logs. No system is perfect, and we will tell you promptly if something happens that affects your data.

Sureday is not intended for anyone under 16, and we do not knowingly collect their data.

If this policy changes materially we will email you before it takes effect. Sureday is currently operated by its founder as a sole proprietor in the United States; contact help@sureday.us with any privacy question and we will answer.