What you write in Sunday Reset is yours. We store it to run the service, send it to our AI provider so Marcus can respond, and never sell it or use it to train AI models.
Who we are
Sunday Reset is run by Dawid Klimowicz, Wojska Polskiego 1, 78-200, Białogard, Poland (“we”, “us”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).
For anything about your data, write to sundayresetmail@gmail.com.
This policy covers the Sunday Reset website at https://www.sunday-reset.app/ and the Sunday Reset web app. Cookies are explained separately in our Cookie Policy.
What we collect
We collect only what Sunday Reset needs to work. We don't ask for your real name.
Email address
- Example
- you@example.com
- Why we need it
- Sign-in, confirming your account, service emails
Password
- Example
- Stored only as a secure hash
- Why we need it
- Sign-in
Display name
- Example
- “Marcus fan”
- Why we need it
- Addressing you in the app
Time zone
- Example
- Europe/Warsaw
- Why we need it
- Knowing when it is Sunday for you
Session content
- Example
- Brain dumps, week review answers, life area scores, intentions
- Why we need it
- Running your sessions, Marcus’s responses, your progress
Marcus’s responses and your reports
- Example
- Weekly responses, quarterly and annual report files
- Why we need it
- Showing you your history and patterns
Subscription status
- Example
- Trial, active, cancelled
- Why we need it
- Giving you access you paid for
Billing records
- Example
- Invoices, amounts, dates
- Why we need it
- Accounting and tax duties
Emails you send us
- Example
- Support questions, data requests
- Why we need it
- Answering you
We process this data to provide the service you signed up for, to meet legal duties such as tax rules, and, for anything sensitive you write, with your explicit consent.
We never see your full card details. Stripe handles payment on its own checkout page.
Your sessions and Marcus
Where your sessions are stored. Everything you write is stored by our hosting provider, Supabase, on servers in the European Union. It is encrypted in transit and at rest.
How Marcus responds. Marcus is an AI mentor powered by the Groq API from Groq LLC. When you finish a session, we send your session content and relevant earlier sessions to the API so Marcus can write his response. Groq LLC processes this on our instructions under a data processing agreement. It does not use your content to train any models.
No training, ever. We never use your sessions to train or fine-tune any AI model.
Who can read your sessions. Only we can access session content, and only when one of these applies:
- you ask us for help and we need to look at your account to give it;
- we need to fix a specific technical problem with your account;
- we need to investigate abuse, a security incident, or a legal request. We use automated checks to detect misuse of the service, such as attempts to manipulate Marcus.
We never read sessions out of curiosity, for marketing, or to create content.
Sensitive information
Sunday Reset is not a medical or therapy service, and we don't analyse your health. But what you write may mention your mood, stress or mental health, which the GDPR treats as a special category of data.
So when you create an account, we ask for your explicit consent to process anything sensitive you choose to write. You can withdraw it at any time by deleting your account, because we can't run your sessions without it.
Marketing emails
If you opt in at signup or in Settings, we send occasional emails about Sunday Reset news and offers. You can unsubscribe at any time in Settings or from any email.
Who we share data with
We don't sell your data. We share it only with the providers below, who help us run the service and may use it only for that.
Supabase
- What it does for us
- Hosting, database, file storage, sign-in
- Data it receives
- All account and session data
- Where
- European Union
Vercel
- What it does for us
- Runs the website and app servers
- Data it receives
- Requests, including session content in transit, and IP addresses
- Where
- European Union (Paris) and United States
Groq API
- What it does for us
- Generates Marcus’s responses and reports
- Data it receives
- Session content
- Where
- United States
Stripe
- What it does for us
- Payments and subscriptions
- Data it receives
- Email, payment details you enter on Stripe’s page
- Where
- EU and United States
Google, Meta, TikTok
- What it does for us
- Website analytics and ad measurement, only if you accept cookies
- Data it receives
- Cookie data from our website, never session content
- Where
- See our Cookie Policy
Stripe processes payment data as an independent controller under its own privacy policy.
We may also disclose data if the law requires it, for example a valid court order.
How long we keep data
Marcus is useful because he remembers. So we keep your history for as long as your account exists, including after a subscription ends, so you can come back to it.
Account and session content
- Kept for
- While your account exists. If you haven’t signed in for 24 months, we email you, and delete the account 30 days later unless you sign in.
After you ask us to delete your account
- Kept for
- Deleted within 30 days.
Billing records
- Kept for
- 5 years from the end of the tax year, as Polish tax law requires
Emails you send us
- Kept for
- Up to 5 years after the conversation ends
AI provider copies
- Kept for
- Not stored. Groq processes your session only to generate Marcus’s response and keeps no copy afterwards.
Your rights and how to use them
You can ask us to:
- see the data we hold about you;
- export it: we send your sessions, Marcus's responses and reports in a readable file;
- correct anything inaccurate;
- delete your account and everything in it;
- restrict or object to how we use your data;
- withdraw consent at any time, without affecting what we did before.
How to ask. Email sundayresetmail@gmail.comfrom the address linked to your account, so we know the request is really yours. We reply within one month. It's free.
Real sessions in our content
We sometimes share example sessions on social media. These come only from our own sessions, or from sessions users send us themselves with permission to publish. We never take sessions from our database for content. Anything you send us is anonymised before it is published, and you can ask us to take it down at any time.
Age limit
Sunday Reset is for adults aged 18 and over. We don't knowingly collect data from anyone younger. If we learn an account belongs to someone under 18, we delete it.
When a week gets heavy
If what you write suggests you may be in crisis, Marcus will encourage you to contact real help and may show you support resources. We don't contact anyone on your behalf or share this with anyone. Marcus is not a substitute for professional care.
Security
We use encryption in transit and at rest, secure password hashing, and limit access to session content as described above.
Transfers outside Europe
Some providers, including our AI provider, process data in the United States. Where that happens, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum for UK users) in our agreements with them.
Your rights by region
European Union and EEA, including Poland. You have the rights listed above under the GDPR. You can also complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (UODO), or the authority in your own country.
United Kingdom.You have the same rights under the UK GDPR, and can complain to the Information Commissioner's Office (ICO).
United States and elsewhere.We give every user the rights in this policy, wherever you live. We don't sell your personal information.
Changes and contact
When we change this policy, we update the date at the top and we email you before it takes effect.
Questions or requests: sundayresetmail@gmail.com.