Privacy Policy

Overview

SUNOQ lets you put an A/B question to a group via a link and discuss public questions.

This privacy policy explains what data we collect, how we use it, who has access, and your rights.

If you have questions, contact support@sunoq.app.

Who we are

SUNOQ is a web and mobile app (iOS and Android) that lets users create and vote on group questions.

Minimum age: 16 years old.

Scope: This policy covers the web app (sunoq.app) and mobile apps.

What we collect

When you use SUNOQ, we collect:

Account data (optional):

• Display name and @handle (for public comments)
• Account ID (assigned automatically when you first use the app via anonymous sign-in)
• Phone number, when you verify your account in the app. It is used only to verify you and to sign you in again, is stored with your sign-in account, and is never shown to other users
• A generated username (for example quiet_tiger42) if you have not chosen one

Question data:

• Questions you create: the prompt and two options
• The original sentence if you use AI drafting (kept on our server)
• Your vote on each question (which side you picked)
• One-line reasons you provide on group questions

Comments and reactions:

• Comments and replies you post
• Reactions (likes) on comments
• Your profile name and handle shown with your comments

Voting analysis data:

• A hashed prefix of your IP address (never the full IP)
• Your user-agent (browser or app identifier)
• A risk score calculated from your voting pattern

Local device data (stored only on your device, not sent to us):

• Your votes and questions you've seen (to show "voted today" and similar)
• Your session token (iOS keychain, Android keystore)

Session data (web only):

• A signed session cookie that lasts up to one year

How we use it

We use your data to:

Provide the app:

• Store your questions, votes, and comments
• Show you questions and let you vote
• Detect and prevent fraud and abuse
• Keep voting fair and tamper-resistant

AI services:

• When you tap "Make question", your sentence is sent to an AI service (via Vercel AI Gateway) to turn it into a two-option question (keeping your wording unless you ask for a neutral rewrite) and check it for harmful content. We do not send your name, vote, or any account ID with this. Screening is automated; people can review reported content.
• Comments you post are screened by AI for harmful content, spam, or exposure of private people. If the AI service is unavailable, your comment is not posted.
• In a dispute, the defense and rebuttal you write are screened the same way before they are stored. When the dispute is revealed, the question and the two sides' texts are sent to an AI service to write a short, playful verdict. We do not send votes, counts, names or account IDs with it. The verdict is for fun; the jury's vote is the result.
• Names and @handles you set are also screened.

Moderation:

• Review reported content (questions and comments)
• Enforce our terms of use
• Respond to legal requests

Analytics:

• Compute aggregate usage figures from our own database (no third-party analytics)

AI processing

AI Drafting and Moderation:

Your sentence is sent to an AI service when you tap "Make question". The service returns a moderated question. If you accept the draft, the question text (prompt, options) is stored with us. The original sentence is kept on our server only to verify that edits are moderated afresh.

Comments and names are screened by AI before they are posted. If the AI service is down, your submission fails and nothing is stored.

The AI model is accessed through Vercel AI Gateway, which may route requests to various AI providers based on configuration. You agree to the applicable AI provider's terms of service.

Who we share it with

We share your data only when necessary:

• Service providers: Supabase (database and sign-in), Vercel (API routing and AI Gateway), Twilio (sends the verification code to your phone)
• Public content: Questions, votes (split shown only after reveal), and comments are public or visible to the group invited
• Legal requests: We may disclose data if required by law (e.g., court order, law enforcement)
• Moderation: Reported content is reviewed by our team
• Aggregated analytics: We may publish anonymized statistics (e.g., "50% of votes go to option A")

We do not sell, rent, or otherwise monetize your personal data.

International transfers

Your data may be transferred to, stored in, or processed outside your country, including the United States. Our service providers (Supabase, Vercel, Twilio) may store data in the United States and elsewhere.

If you are in the EU or Turkey, your rights under GDPR, KVKK, or other laws still apply. You can contact us to exercise these rights.

How long we keep it

Questions and votes: Kept in our database.

Comments: Kept unless removed for moderation. Removed comments are marked as removed in the database.

Accounts: In the app, Profile > Delete my account removes your profile, your comments (a comment that others replied to stays as “[deleted]” without your name), the questions you asked and their original sentences, your likes, blocks, push tokens, phone number and usage counters. Your votes stay so that results stay correct for everyone else, but nothing links them to you any more. Reports you filed are kept for safety and are unlinked in the same way. Copies in routine backups disappear when those backups expire.

Raw input sentences: Kept as long as the question exists.

Session cookies: Expire after one year.

If you cannot use the app, contact support@sunoq.app to request deletion of your account and data.

Your rights

Right to access: You can request a copy of your personal data by contacting support@sunoq.app.

Right to deletion: You can delete your account yourself in the app (Profile > Delete my account); what is removed and what stays is described under retention. If you cannot use the app, email support@sunoq.app.

Right to rectification: You can update your profile (name and @handle).

Right to data portability: You can request your data by contacting support@sunoq.app.

Right to object: You can object to certain processing by contacting support@sunoq.app.

We aim to respond to requests as soon as possible. No account is required to submit a request.

Age limit

SUNOQ is for users aged 16 and older. We do not knowingly collect data from children under 16. If we learn that a child under 16 has provided personal data, when you ask us we will delete the account and data.

Parents or guardians who believe a child under 16 has signed up should contact us immediately.

Cookies and device storage

Cookies: SUNOQ uses one signed session cookie on the web voting pages. This cookie stores a random voter ID and lasts up to one year. It is httpOnly and does not track you across other sites.

Tracking: We do not use tracking pixels, analytics SDKs, or third-party cookies.

Local storage: The mobile app stores your session token in secure device storage (iOS keychain, Android keystore). This data never leaves your device.

Changes

We may update this privacy policy from time to time. The "Last updated" date above shows when the policy last changed. Material changes will be noted here. Your continued use of SUNOQ after changes constitutes acceptance.

Contact

Support email: support@sunoq.app

Contact us with any questions about this policy or to exercise your rights.

Draft pending legal review. This privacy policy has not yet been reviewed by legal counsel and may change before publication.