Privacy notice

What we collect

• Quiz and request information: quiz answers, planning requests, dates, budgets, group details and constraints you choose to share.
• Contact and identity information: your name, email address, WhatsApp phone number and the evidence needed to connect a verified contact method to your Sunny account.
• WhatsApp messages: messages you send Sunny, message identifiers, consent choices and delivery or response status supplied by Meta.
• Preferences and memory: useful preferences you ask Sunny to remember, such as usual groups, pets, accessibility needs, dietary needs, budgets and previous choices.
• Plans and feedback: recommendations, edits, approvals, rejections, outcomes and feedback used to fulfil your request and improve the service.
• Technical and safety records: request identifiers, timestamps, security and reliability events, and limited website performance measurements. We design logs not to contain raw conversations or secrets.

Please avoid sending identity-document numbers, payment-card details, passwords or information Sunny does not need. If a request concerns another person, share only what you are authorised to share.

Why we use it

We use personal data to provide the quiz and planning service; understand who and what a plan must fit; research, review and deliver recommendations; continue a conversation across approved channels; remember preferences you choose to keep; prevent duplicate messages and misuse; respond to support and privacy requests; and measure and improve reliability and usefulness.

We ask for consent when required and keep service contact, marketing, newsletter and proactive-contact choices separate. We do not sell personal data. We do not use a “yes” to a service message as permission for unrelated marketing.

Who processes it

Access is limited to authorised Sunny staff and service providers that need the information for the purposes above:

• Cloudflare provides website and Worker hosting, databases and storage, queues and workflows, email delivery, security, limited performance measurement, and the AI Gateway through which model requests are controlled.
• Meta and WhatsApp provide the WhatsApp Business channel, including phone-number identity, messages and delivery status.
• DeepSeek supplies the language model used for planning assistance through Cloudflare AI Gateway. Sunny validates model output; the model cannot approve, send, book, pay, or write durable memory by itself.

We may also disclose information where the law requires it, to protect people or the service, or during a properly governed business reorganisation. We do not disclose personal data merely because two systems happen to share infrastructure.

Processing outside Singapore

Cloud services and messaging or AI providers may process data outside Singapore. Where personal data is transferred outside Singapore, we assess the purpose, data involved, provider controls and contractual or other safeguards intended to provide protection comparable to Singapore's Personal Data Protection Act. Contact our privacy lead for current processor or transfer information relevant to your request.

How long we keep it

We keep personal data only while it serves the purpose for which it was collected and for documented service, safety, dispute, audit or legal needs. Active quiz, request, conversation, preference and recommendation records are tied to the relevant service relationship. Short-lived operational logs use shorter retention. Shared public facts are kept separately from personal context.

When information is no longer needed, we delete it, anonymise it, or remove its link to you. Published statistical or model artefacts are not rewritten in place; instead, deletion is fenced and future datasets or artefacts are rebuilt without the person. A verified product-deletion request is targeted for completion within 30 calendar days, subject to any limited record we must keep for legal or security reasons.

Your choices and requests

You may ask to access personal data Sunny holds about you, correct incomplete or inaccurate data, withdraw consent, or delete your Sunny data. You can also challenge a memory or tell Sunny not to use it in future planning.

If you withdraw consent, we will explain the likely consequences before it takes effect. For example, withdrawing WhatsApp service consent means Sunny may no longer be able to continue planning through WhatsApp. Withdrawal does not affect processing that was lawful before it took effect.

Our product deletion promise is broader than the minimum deletion rights that may apply under law: we aim to remove your private Sunny state across the quiz, conversations, plans, memories, pending work, controlled exports and later training data. See the step-by-step deletion instructions.

How we protect it

We minimise collection, separate personal user state from shared data, restrict staff access, authenticate and authorise administrative actions, protect secrets outside source code, keep audit evidence, make sends idempotent, and fence deletion so restored or replayed data cannot silently recreate an erased identity. No internet service is risk-free; if we confirm a breach affecting you, we will respond and notify as required.