Privacy Policy

This Privacy Policy explains how Timeground (“Timeground”, “we”, “us”) collects, uses, and protects your information when you use Sundial (the “Service”). Sundial is a personal journaling app, and we’ve built it to keep your writing private by default. By using the Service you agree to this Policy.

1. Who we are

Sundial is operated by Timeground, based in India. For any privacy question or request, contact our privacy team at privacy@timeground.in. You can learn more about us at https://www.timeground.in/.

2. Information we collect

• Account information. When you sign in with Google, we receive your name, email address, profile photo, and a unique user ID. We use Google Sign-In so you don’t need a separate password.
• Your diary content. The entries you write, including text, the dates they relate to, moods, tags, and timestamps. This content belongs to you.
• On-device data. Settings and a copy of your entries are stored locally in your browser (via IndexedDB and localStorage) so the app is fast and works offline. This includes your theme preference and whether you’ve enabled AI features.
• Limited technical data. Like most web apps, our hosting provider processes basic request data (such as IP address and browser type) to deliver and secure the Service. We do not use advertising or third-party analytics trackers.

3. How we use your information

• To provide the Service — store, sync, search, and display your entries.
• To authenticate you and keep your account secure.
• To generate AI summaries and insights, but only when you ask (see §5).
• To respond to your requests and provide support.
• To comply with legal obligations and protect against abuse.

We do not sell your personal data, and we do not use the contents of your diary for advertising.

4. Service providers (sub-processors)

We rely on a small number of trusted providers to run Sundial:

• Google Firebase (Authentication & Firestore database) — to sign you in and store your entries securely.
• Google Gemini API — to generate AI responses, used only when you trigger an AI feature.
• Vercel — to host and deliver the application.

5. AI features and Gemini

AI features (summaries, “ask your diary”, mood & themes, and writing prompts) are opt-in and run only when you tap a button — never automatically. When you use them, the relevant entry text is sent to the Google Gemini API to produce a response.

Important: if the Service is configured with a free-tier Gemini API key, Google may use the submitted content to improve their models, as described in Google’s terms. We surface a one-time notice before you first use AI. If you’d rather keep certain entries entirely private, simply don’t run AI on them.

6. Legal bases for processing

Where the EU/UK GDPR applies, we process your data to perform our contract with you (providing the Service), based on your consent (for AI features), and for our legitimate interests in securing and improving the Service. We also honour rights under the California CCPA/CPRA and India’s Digital Personal Data Protection Act, 2023.

7. Data retention and deletion

We keep your entries until you delete them or your account. You can export your full diary (JSON or Markdown) at any time from Settings, and delete individual entries whenever you like. To delete your account and associated data, contact privacy@timeground.in and we’ll action it promptly.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to withdraw consent. To exercise these rights, email privacy@timeground.in. You also have the right to lodge a complaint with your local data protection authority.

9. Security

Data is encrypted in transit, access is restricted by per-user security rules so that only you can read your entries, and we follow reasonable safeguards to protect your information. No system is perfectly secure; if you discover a vulnerability, please report it to security@timeground.in.

10. International transfers

Our providers may process data in countries other than yours. Where required, such transfers are covered by appropriate safeguards (such as standard contractual clauses).

11. Cookies & local storage

We use only essential storage needed to run the app — for authentication, your theme preference, and the offline cache of your entries. We do not use advertising or tracking cookies.

12. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data.

13. Changes to this Policy

We may update this Policy from time to time. We’ll revise the “Effective” date above and, for material changes, provide a more prominent notice.

14. Contact us

Privacy: privacy@timeground.in
Security: security@timeground.in
Legal: legal@timeground.in
General: hello@timeground.in