Privacy Policy

Last updated: May 18, 2026

Someday is a private family journal app. It's built and operated by one person — Nicole Sunmiz — and this is the plain-English version of how your data is handled. If anything here is unclear or you want something changed about your data, email [email protected].

1. Who Someday is for

Someday is for adults documenting their family life. The audio recordings and photos that go into the journal are uploaded by you, the adult account holder. Children do not create accounts in Someday, do not log in, and do not have their own profiles. Anything captured about a child in Someday is captured by you.

2. What we collect

When you use Someday, the following data is stored on our servers:

Account data

• Your email address and name (handled by our authentication provider, Clerk).
• The family group you belong to and which other adults (if any) are in it.

Memory content

• Audio recordings you make in the app.
• Photos you attach to entries — either picked from your device's photo library or taken in the moment with the device camera. When you choose to take a new photo, iOS asks for camera permission; the camera is used only for that single capture, not for continuous video or any other purpose. When you take a photo in the app, we also save a copy to your device's Photos library (iOS may ask for permission to add photos). We do not read or upload your broader photo library unless you explicitly pick photos to attach.
• Transcripts of your audio (generated automatically; see Section 4).
• Text notes, tags, family member names, and child names you enter in the app.
• Recaps the app generates from your entries (text only).

Technical data

• Your device platform (iOS / Android) and app version, used so we can triage bugs you report.
• Crash and error reports collected by Sentry once it's wired in (planned). These include a stack trace, the page you were on, and generic device info — not the contents of your entries.

We do not collect:

• Location data.
• Contacts.
• Advertising identifiers (IDFA / GAID).
• Analytics on your in-app behavior.

3. Why we collect it

So the app works. That's it. Every piece of data above exists because the app can't function without it (e.g. we can't show your journal without storing it).

We do not sell your data, share it with advertisers, or use it for marketing. There is no advertising in Someday.

4. AI processing — exactly what gets sent where

Someday uses OpenAI for two specific jobs:

(a) Transcription. When you finish a voice recording, the audio file is sent to OpenAI's Whisper model so it can be turned into text. We send the audio file once, get the transcript back, and store the transcript in your journal entry alongside the audio. After that, the audio file itself is never sent to OpenAI again.

(b) Recap generation. When you ask Someday to generate a recap of a week, month, or year, we send OpenAI's GPT models the text content of the relevant entries for that period. Specifically, we send:

• The transcript and text of each entry in the range.
• The date of each entry.
• The names of any family members or children tagged on each entry.

We do not send your photos to OpenAI. We do not use OpenAI's vision models. Photos stay in our object storage and are shown only in the app to people in your family.

OpenAI's data handling. Someday uses the OpenAI API (not ChatGPT). Per OpenAI's API terms, data sent through the API is not used to train OpenAI's models. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, after which they're deleted.

5. Who else processes your data

The companies below help us run Someday. They only see the data they need to do their job:

• Clerk — handles sign-up, log-in, and your account profile (name, email). Stores your authentication credentials.
• OpenAI — transcribes audio and generates recap text (see Section 4). Photos are never sent.
• Supabase — hosts our PostgreSQL database (your entries, tags, recaps, family membership) and our object storage (your audio files and photos).
• Railway — runs the Someday API server.
• Sentry (planned) — collects crash reports (no entry content).

We choose vendors that don't sell user data and that comply with major privacy laws (GDPR, CCPA). If any of this changes, we'll update this page.

6. Where your data is stored

Data is stored in the United States (Supabase, Railway). OpenAI processes API requests in the US. Clerk operates globally with US-based primary storage. If you live outside the US, by using Someday you consent to your data being transferred to and processed in the US.

7. How long we keep your data

• Entries (audio, photos, transcripts, text, tags, recaps): kept for as long as your account is active. If you delete an entry from the app, it's deleted from the database and from object storage.
• Account data: kept for as long as your account is active.
• Crash reports (Sentry): retained for 90 days, then deleted.

8. Deleting your account and data

During this beta period, account deletion is handled manually so we can be careful about it. To delete your account:

1. Open Someday → Settings → Delete my account.
2. That opens an email pre-filled with your account ID. Send it.
3. Within 7 days, we'll permanently delete:
   • All your entries (audio, photos, transcripts, text, tags).
   • All recaps generated from your entries.
   • Your family member row and any pending invites.
   • Your Clerk authentication account.
4. We'll reply to confirm when it's done.

If you're in a family with other adults, deleting your account does not delete entries created by the other adults or remove the family itself.

You can also email [email protected] at any time to:

• Request a copy of your data.
• Ask what we have on you.
• Have a specific entry deleted.

9. Children's privacy

Someday is not designed for children to use. We do not knowingly collect data from anyone under 13. Children do not have accounts and cannot sign in.

Photos, audio, and other content about children inside Someday are uploaded by you, the adult account holder. You are responsible for deciding what content about your child you want to keep in the app. If you want a specific piece of content about a child deleted, you can delete it yourself from the app, or email [email protected].

10. Security

• All traffic between the app and our servers is encrypted (HTTPS).
• Audio and photo files are stored in private object storage; the app fetches them with short-lived signed URLs.
• Database backups are encrypted at rest.
• Only adults you've explicitly invited into your family group can see your entries.
• Authentication is handled by Clerk, which supports strong password rules and (where you've enabled it) multi-factor authentication.

No internet service is perfectly secure. If we discover a breach that affects your data, we will notify affected users by email within a reasonable timeframe and disclose what happened.

11. Your rights

Depending on where you live, you may have legal rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict certain processing.
• Receive your data in a portable format.

To exercise any of these rights, email [email protected].

12. Changes to this policy

If we make material changes to this policy, we'll post the updated version here with a new "Last updated" date and, where appropriate, notify you in the app.

13. Contact

Questions, requests, or concerns:
[email protected]