Legal

Privacy Policy

Last updated: October 2026

The short version

• Sunup collects what it needs to know whether you're okay and to reach the people you chose.
• Sunup doesn't track your location. Your location is only sent when you press SOS with "Include my location" on, or once when you turn on the weather (then Sunup keeps your town and that spot rounded to about a kilometer, never where exactly you are).
• We don't sell your information or show ads.

What we collect

• Account: your name, mobile number, time zone, and a sign-in token for each device. If you save a passkey, we keep its public key, the kind of device it was made on and when it was last used; the private key never leaves your device.
• Schedule: your check-in windows, grace period, and away-mode dates.
• Language: the language you use Sunup in (English or Spanish), so notifications, texts and calls to you match it.
• Check-ins: when you checked in, and any mood, note or photo you add.
• Timeline posts: what you write, any photo you add (with a one-line description of it, if Sunny is on), any voice note you record (and the words it heard, where your phone or browser can write them down on the device itself; otherwise there are none, and you can fix or clear them before you post), and the emoji and replies people send back. Replies you write go under someone's post and are kept with it. Posts are kept for six months; you can delete any of yours at any time, and deleting your account deletes them all.
• Your circle: who watches over you and whom you watch. For people you add by phone, their name, number and whether they replied YES or STOP.
• "If I go dark" packet: whatever you write in it (for example pet care, door codes, medications and contacts) and who may receive it.
• Moments and SOS: timer details you enter (who, where, a link, notes), and your location only if you share it with an SOS. When you ask your circle for a hand, what you wrote goes to the people in your circle (by text only to contacts who replied YES).
• Check-in link: if you make one (for a Siri Shortcut or a button), Sunup keeps only a scrambled fingerprint of it, so the link itself can't be read back from our storage.
• Medicine reminders: the name and time of each medicine you add, and when you mark a dose taken (kept for a week). If you share a medicine with your circle, the people watching over you in the app see its name and whether today's dose was taken, and if you choose, get a notification when a dose is 3 hours late. Remove a medicine and its doses are forgotten.
• Appointments: what you add (what, when and where), kept until a day after. If you ask your circle for a ride, the people in it with the app see that appointment and who's driving.
• Weather: if you turn it on, your town, its National Weather Service forecast area, and your location rounded to about a kilometer (so storm warnings drawn on a map are matched to where you live). The Weather Service gets your location rounded to about 100 meters, without anything about who you are. Unless you turn sharing off, your circle sees the forecast there and hears about heat, cold and winter storm warnings (not your town). Stop it in You and the town is forgotten.
• Last used: when you last used Sunup (to the nearest few minutes) and, where your phone tells the browser, its battery level then. Your circle sees it only in alerts about you: on the alert while it's open, and in the alert message they get ("last used Sunup at 9:12 PM, phone battery 4%"), because it helps them judge whether it's a dead phone.
• Messages: a log of the notifications, texts and calls Sunup sends about you, which you can see under Activity.
• Payments: on the website, handled by Stripe; in the apps, by Apple or Google, through RevenueCat, which tells us whether your subscription is active. We store your subscription's status, plan and renewal date (and on the website your Stripe customer and subscription IDs), never your card number. RevenueCat gets your Sunup account ID (a random code) and your purchases, not your name, number or anything else in Sunup, and its record is deleted with your account.
• Notifications: your browser's push subscription or your phone's push token, so we can alert you. If you choose a reminder by text or phone call, we text or call the number you confirmed.
• Crash reports: if the app hits an error, it sends the error message, the screen it happened on and the kind of device and browser, without your name, number or account, so we can fix it.

How we use it

To run your check-ins, send reminders and alerts, show your circle your check-ins, release your packet when an alert reaches that step, sign you in, process subscriptions, and keep the service secure. We don't use your information for advertising.

Who can see what

• People watching over you see your check-ins (with mood, note and photo), your number, and alerts about you.
• Your circle on Sunup (the people who watch over you and the people you watch, in the app) sees your timeline posts and who sent emoji or replies back on them. A reply you write is seen by everyone who sees that post. Nothing on the timeline is public.
• People you add by phone only receive the texts and calls Sunup sends about you, including your packet if you marked them to receive it.
• Your packet is only visible to the people you mark, only after an alert reaches the release step, and it seals again when the alert ends.

Service providers

We use Twilio to send texts and make calls, Stripe, Apple, Google and RevenueCat for payments, Apple Push Notification service, Google Firebase Cloud Messaging and your browser's push service for notifications, Anthropic for Sunny (below), the US National Weather Service for the weather (it gets a rounded location, never who you are), and Render to run Sunup. They process data only to provide those services to us.

When you speak instead of typing (to Sunny, or for a check-in note or a post), your phone or browser's own speech recognition turns it into words, and Sunup only receives the words. Depending on the device, that can happen on the device or with its maker's speech service (for example Apple, Google or Microsoft), under their privacy terms. Voice notes are different: their sound is never sent to a speech service, and their words are written down only where that can happen on the device.

Sunny, the AI assistant

Sunny is an optional assistant built on Anthropic's Claude. When you use it, what you ask, together with the account details it needs to answer (your name, check-in windows and recent check-in times, moods and notes, your medicine reminders and appointments, your circle's names and today's status), is sent to Anthropic to produce the answer. The same goes for Sunny's weekly reads and Sunday summaries (which can mention a few words from a post your circle shared that week), safety-timer planning, packet sorting, replies to your check-ins (including the photo, if you add one), alert briefings, a one-sentence description of each photo you post to the timeline (so people who can't see it can hear what's in it), recent timeline posts (with the written words of voice notes, never the recordings), replies and who sent which emoji (by first name) when you ask Sunny what's new (only from people who keep Sunny on), a post Sunny drafts for you (nothing is shared until you tap Post), a photo you ask Sunny to suggest a caption for, a post you tap Reply under when Sunny suggests replies (only if its author keeps Sunny on), a short spoken answer when you reply to Sunup's check-in call with more than a plain "I'm okay" (what you said is sent, transcribed), and translating a check-in note when someone in your circle asks for it in their language (unless their browser can translate it on their own device, in which case nothing is sent). Anthropic doesn't use this data to train its models. Your "If I go dark" packet is only sent if you ask Sunny to sort, write or check it. You can turn Sunny off under You at any time; nothing about you is sent to Anthropic while it's off, including when people in your circle use Sunny. Alerts, texts and calls never depend on Sunny.

Text messages

We text your number to sign you in and, if you watch over someone, to alert you about them. We text people you add to your circle once to ask them to confirm, and after that only if they replied YES. Mobile numbers and texting consent are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with anyone except the provider that delivers the messages.

If you call Sunup's number, we use the number you're calling from (and your carrier's check of it) to know it's you; we don't keep a recording. What you say is turned into text by our phone provider, Twilio, only to hear whether you're okay or need a hand, as on Sunup's own calls.

How long we keep it

• Check-ins, resolved alerts and ended timers: 60 days.
• Timeline posts, their photos and voice notes: six months, or until you delete them (a deleted post's photo and voice note are erased at once).
• The log of messages sent: 30 days.
• Account, circle and packet: until you delete them or your account.
• Backups: so nothing is lost if something fails, an encrypted copy of everything above except photos and voice notes is made every day. Each copy is deleted after 30 days.

Your choices

• Edit or clear your packet, remove people from your circle, or pause check-ins at any time in the app.
• Delete any of your timeline posts (Circle > Timeline; "Show older posts" reaches back six months), and turn off notifications about new posts under You.
• People added by phone can reply STOP to stop all texts and calls.
• Download a copy of your data in the app under You > Download my data.
• Turn Sunny, the AI assistant, on or off under You.

Deleting your account

In the app, go to You > Delete my account. This erases your account, check-ins, timeline posts and their photos, the emoji and replies you sent, circle links, packet, alerts and message log right away, signs you out on every device, and cancels any subscription. Your data then leaves our encrypted backups as they expire, within 30 days. If you can't open the app, email info@cactipacti.com from the address or with the phone number on your account and we'll delete it within 30 days.

Security

Connections are encrypted, sign-in tokens are stored only as one-way hashes, sign-in codes expire after 10 minutes, and passkeys can't be phished or reused on another site. No system is perfectly secure; tell us at info@cactipacti.com if you find a problem.

Children

Sunup isn't meant for children under 13, and we don't knowingly collect their information.

Contact

Cacti Pacti, 4539 N 22ND ST Ste N, PHOENIX, MARICOPA COUNTY, AZ 85016 US. Email info@cactipacti.com.