Privacy
Short version: we keep the minimum needed to save your mornings, we never sell or share it, there are no ads and no trackers, and you can delete everything in one tap.
Anonymous usage counts
To know whether Sunup actually helps (do people finish their mornings? how long does it take?), the app sends a few anonymous counts to our own server — no third-party analytics:
- which screen you opened and moments like “started a morning”, “finished a card”, “opened the gift”, “finished the morning” (with number of cards and minutes);
- device type (phone / tablet / desktop), your country (from Cloudflare), the website that linked you here (domain only) or the short tag in the link you used (like “share” in
?ref=share), and whether this is your first day — your device remembers the date of your first visit and sends only a bucket like “1–7 days”.
No cookies, no IP addresses, no account id, and no id that lasts beyond one browser tab, so visits can’t be linked together or to you. These counts are kept for 180 days. If your browser sends Do Not Track or Global Privacy Control, nothing is sent.
Without an account
Everything stays in your browser’s local storage on this device. Nothing about your play is sent to our server.
With Google sign-in
We store:
- Your Google account ID, email address and name — to know it’s you.
- For each card you finish: the date, which card, your score and small details (e.g. hints used, wake-check reaction times).
- What you bought in the nook shop, your room layout, your settings and the quotes you saved.
We don’t store your Google password (we never see it) or anything from your Google account beyond the above. We don’t store what you type in the Gratitude Glance — it never leaves your screen.
Morning pages
What you write in ✍️ Pages is stored only in this browser on this device (IndexedDB). It is never sent to Sunup’s server — we only record that you did a Pages card that day (typed or paper, 1 or 3 pages) so it can earn sunbeams. Anyone who can open Sunup on this device can read the pages, and clearing the browser’s site data erases them. Use Export in My pages to keep a copy, and Delete to remove a page.
Morning reminders
If you turn on a reminder, your browser gives us a push address for this device. We store only that address, your time zone and the time you picked — not your name, email or account. The reminder carries no content; your phone shows a fixed “Good morning” message. Turning the reminder off deletes the row.
Phone buddy (optional)
If you turn on Pip, your phone buddy in the Android app and allow Usage access, Sunup reads on your phone which of the apps you chose (for example YouTube, Instagram or TikTok) were on screen and for how long. It doesn’t see what you watch, read or type, and it ignores every other app. This is used only to send you a gentle nudge after a long stretch, to show your time on those apps today, and to measure when you first opened one after starting Sunup in the morning. It stays on your phone and is never sent to Sunup’s server or anyone else. On iPhone, Sunup can’t see Screen Time; if you set up the Shortcuts “door”, Sunup counts only the times it was opened that way, on your phone. Turn it off in Me at any time, and remove Usage access in your phone’s Settings.
Payments
After a 7-day free week, Sunup costs $5 for 30 days or $30 for a year, paid once through Razorpay — there is no automatic renewal. Razorpay handles your card, UPI or bank details; they never reach Sunup. We store only the order id, payment id, plan, amount, currency and the dates your pass covers, so we can give you access. Razorpay keeps its own payment records under its privacy policy.
Cookies
Two, both essential: a sign-in session cookie (HttpOnly, secure) and a short-lived cookie that protects the Google sign-in step. No advertising or analytics cookies.
The site owner can see the list of accounts (name, email, sign-up date, number of cards played) to run the service. It is never shared.
Where it lives
Sunup runs on Cloudflare Workers with a Cloudflare D1 database. Data is sent over HTTPS.
Deleting
Go to Me → Delete my account and all data. Your account and every record above are removed from our database immediately. Guests can use Reset progress on this device.
Contact
For a privacy question or request, email toomanytabsopen02@gmail.com.
Terms · Refunds · Digital delivery · Contact