The short version
Sunnyy is an assistant that thinks using AI models we rent from other companies. That means the things you ask it leave your Mac and go to those companies so they can answer. We do not sell your data, we do not train models on it, and below we name every company involved and why.
What we collect
- Your account — email address and a password. The password is stored only as a scrambled hash by our identity provider; we never see it.
- What you ask Sunnyy — the words you type or speak, plus whatever context you point it at: screen text you ask about, file contents, and data from apps you have connected. This is sent to an AI provider to produce an answer.
- Your voice — when you speak to Sunnyy in live voice mode, audio streams to OpenAI for as long as that conversation lasts. We do not record or keep the audio.
- A usage ledger — what each request cost, how many jobs you have run, and when. This is how your plan allowance is enforced. It records amounts and timestamps, not the content of what you asked.
- A one-way device fingerprint — so the free allowance can be granted once per Mac. It is a salted hash: we cannot reverse it into a serial number, and it is not used for tracking or advertising.
- Payment details — handled entirely by Stripe. We store only your Stripe customer and subscription identifiers and which plan you are on. We never receive your card number.
- Website information — a waitlist email if you give one, a hashed IP address for short-term rate limiting on that form, and aggregate page views via Vercel Analytics. No advertising cookies.
- Diagnostic logs — errors and timings so we can fix what breaks. These are kept short and are not a copy of your conversations.
Who we share it with, and why
These are every company that can see any part of the above. Each one receives only what its job requires.
| Company | Why |
|---|---|
| Anthropic | runs the Claude models behind Sunnyy's reasoning |
| OpenRouter | backup route to the same class of models when Anthropic is unavailable or over budget |
| OpenAI | live speech-to-speech when you talk to Sunnyy out loud |
| ElevenLabs | the premium spoken voice, when you enable it |
| Supabase | accounts, sign-in and the usage ledger |
| Stripe | payments and subscription management |
| Resend | account and product email |
| Vercel | hosting for sunnyy.ai and the API |
| Composio | the connections to apps you explicitly link |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We may disclose information if the law compels us to, and we will tell you unless we are forbidden from doing so.
Training
We do not use your content to train AI models. We reach the providers above through their commercial APIs rather than their consumer products, specifically because API traffic is not used for model training by default. If that ever changes, or if we ever wanted to use your content for training, we would ask you first and it would be off by default.
How long we keep it
- Account details: until you delete your account.
- Usage ledger: kept for the current billing period and up to 12 months afterwards, because it is the record behind your invoices.
- Device fingerprint: for as long as the free-allowance rule needs it.
- Diagnostic logs: about 30 days.
- Prompts and voice: we do not retain them after answering. Providers may hold them briefly for their own abuse monitoring under their terms.
- Waitlist email: until you ask us to remove it.
Your rights
Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. If you are in the UK, EU or EEA you also have the right to object to or restrict processing, to portability, and to complain to your local supervisory authority. If you are in California you have the rights to know, delete, correct and opt out of sale or sharing — and as above, we do not sell or share.
We process your data to perform our contract with you (running the service you paid for), to comply with the law, and for the narrow legitimate interest of keeping the service secure and preventing abuse.
Email info@sunnyy.ai from your account address and we will action it within 30 days. We do not charge for this and we will not make the service worse for you because you asked.
Where your data goes
Sunnyy LLC is based in the United States and the companies above are largely US-based, so your information is processed in the United States. If you are in the UK, EU or EEA, transfers rely on Standard Contractual Clauses in our agreements with those providers.
Security
Traffic is encrypted in transit. Your sign-in session is stored in the macOS Keychain on your machine, not in a file we can read. Access to production data is limited to the people who need it. No system is perfect; if we ever suffer a breach affecting you, we will tell you promptly and plainly.
Children
Sunnyy is not for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, email us and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top tells you which version is current.
Contact
Privacy questions, requests or corrections: info@sunnyy.ai or our contact page. The Terms of Service govern your use of Sunnyy.