Privacy Policy
Last Updated: May 11, 2026
AY Consulting dba Sunny Launch ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our technology-enabled coordination and productivity services, our website, and related features (collectively, the "Services").
By using our Services, you agree to the practices described in this policy.
1. Information We Collect
Information You Provide
- Account information: Name, email address, phone number, and names of other individuals relevant to the Services
- Profile information: Schedules, preferences, logistical details, and other context you choose to share
- Communications: Messages you send and receive through our Services, including SMS replies and email correspondence
Information from Third-Party Services
- Google Calendar data: When you connect your Google Calendar account, we access your calendar events (including event titles, times, locations, and attendee information) to detect changes and, with your explicit confirmation, write entries to your calendar. We request read and write access to your calendar events. We do not access other Google account data beyond calendar events.
- Apple Calendar (iCloud) data: When you connect an Apple Calendar via app-specific password, we access events (titles, times, locations, descriptions) from the calendar you select. Read-only — we cannot modify or delete events on Apple-side. We do not access other Apple data (mail, contacts, photos, reminders).
- SMS delivery data: When we send or receive SMS messages through our messaging provider, metadata such as delivery status, timestamps, and phone numbers is processed.
Information Collected Automatically
- Usage data: How you interact with our Services, including feature usage and service activity timestamps
- Device and access data: Browser type, IP address, and device identifiers when accessing our website
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the Services: Detect calendar changes, generate recommendations, send notifications via SMS and email, and write confirmed changes to your calendar
- Communicate with you: Send recommendations, summaries, service updates, and respond to your inquiries
- Improve the Services: Analyze usage patterns, troubleshoot issues, and improve the quality of recommendations
- Train and improve our systems: Your interactions with recommendations (confirmations, rejections, and modifications) may be used to improve the accuracy and quality of future suggestions
- Comply with legal obligations: Respond to legal requests and prevent fraud or abuse
3. AI and Automated Processing
Our Services use artificial intelligence (AI) to analyze calendar data, detect conflicts, and generate recommendations. Specifically:
- Calendar analysis: AI processes your calendar events to identify changes, conflicts, and opportunities
- Recommendations: AI generates suggestions based on your calendar data, constraints, and preferences
- Human review: Recommendations may be reviewed by our team before being sent to you to ensure quality and accuracy
AI-generated recommendations are suggestions only. You always retain the ability to accept, reject, or modify any suggestion before it affects your calendar.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We use third-party service providers to operate the Services, including:
| Provider | Purpose | Data Shared |
|---|
| Google (Calendar API) | Calendar integration | Calendar events (read/write with your authorization) |
| Apple (iCloud / CalDAV) | Calendar integration | Calendar events from the calendar you select (read-only, app-specific password) |
| Twilio | SMS messaging | Phone numbers, message content |
| Anthropic | AI processing | Calendar data, relevant context (anonymized where possible) |
| Email delivery provider | Notifications and summaries | Email address, email content |
| Database hosting provider | Data storage | All service data (encrypted) |
These providers process data on our behalf and are contractually obligated to protect your information and use it only for the purposes we specify.
Other Disclosures
We may disclose your information if required by law, in response to valid legal process, to protect our rights or safety, or in connection with a merger, acquisition, or sale of assets (with notice to you where feasible).
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Services. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).
Calendar event data and recommendations are retained for service improvement purposes and are anonymized or deleted upon account closure.
6. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure storage of authentication tokens and credentials
- Apple iCloud app-specific passwords: stored in our database encrypted at rest using symmetric encryption (
pgcrypto). The encryption key is held in our hosting environment, separate from the database, and is not accessible to our service providers
- Access controls limiting who can view personal data
- Regular review of security practices
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Withdraw consent: Revoke access to connected third-party services (such as Google Calendar) at any time through your Google account settings
- Opt out of SMS: Reply STOP to any SMS message to unsubscribe from text notifications
To exercise any of these rights, contact us at privacy@sunnylaunch.com. We will respond within 30 days.
8. Google API Services — Limited Use Disclosure
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google Calendar data to provide and improve the Services as described in this policy
- We do not use Google Calendar data for advertising purposes
- We do not sell Google Calendar data to third parties
- We limit human access to Google Calendar data to what is necessary for service operation, security, or legal compliance
9. Apple Calendar (iCloud) — App-Specific Password Handling
When you connect your Apple Calendar, you generate an app-specific password at appleid.apple.com and paste it into our setup flow. Specifics:
- The password lets us read events from one Apple calendar you select. It cannot read your email, contacts, photos, reminders, or any other Apple data.
- The password cannot change or delete events on your calendar — read only.
- We store it encrypted at rest. The encryption key sits in our hosting environment, separate from the database.
- You can revoke the password at any time at appleid.apple.com → Sign-In and Security → App-Specific Passwords → Willa. This immediately stops our access; we will detect the revocation on the next sync attempt and stop trying.
- If you change your main Apple ID password, all app-specific passwords (including ours) are revoked automatically by Apple. We will text you to ask for a new one.
- We do not have your main Apple ID password and do not want it.
10. SMS/Messaging Disclosure
Our Services send SMS notifications to users who have opted in. Regarding our messaging practices:
- We obtain explicit consent before sending any SMS messages
- Message frequency varies based on your family's schedule activity
- Message and data rates may apply
- You can opt out at any time by replying STOP to any message
- For help, reply HELP or contact us at privacy@sunnylaunch.com
SMS Consent & Data
We do not share your messaging consent data, opt-in status, or phone numbers with third parties for marketing purposes. Your phone number is used solely to deliver Village Assistant ("Willa") coordination messages that you have opted into.
11. Children's Privacy
Our Services are intended for use by adults (age 18 and older). We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@sunnylaunch.com and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes are posted constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
AY Consulting dba Sunny Launch
Email: privacy@sunnylaunch.com
Website: https://sunnylaunch.com