This Privacy Policy explains how SundayRec handles data. The short version: SundayRec is a desktop app — your recordings and settings live on your own machine, and we don't collect them. The longer version is below, broken down by exactly what data exists and where it goes.
1. Data stored on your machine
Everything SundayRec needs lives in your OS app-data directory (e.g. ~/Library/Application Support/SundayRec on macOS, %APPDATA%\SundayRec on Windows):
- Recordings — saved to the folder you choose during setup.
- Settings — schedule, audio source, format preferences, language, etc.
- Recording history & queue — a local database of which files have been recorded, edited, uploaded or published.
- Logs — a rolling local log file for troubleshooting. Never sent anywhere unless you choose to share it.
None of this data is transmitted to SundayRec or to any server we operate.
2. OAuth tokens (Google Drive, Dropbox)
If you enable cloud backup, SundayRec stores access & refresh tokens from your Google or Dropbox account. Tokens are encrypted using your operating system's built-in secure storage:
- macOS: Keychain (via Electron's
safeStorageAPI) - Windows: DPAPI (per-user encryption)
Tokens are only used by SundayRec on your machine to upload files. They are not sent to any third party.
3. Cloud uploads
When you enable Google Drive or Dropbox backup, files are uploaded directly from your machine to the account you authorized. SundayRec is not in the middle — we never see the files, never proxy them through our infrastructure, and never have access to your cloud account beyond what the OAuth scope permits (typically: write to a single folder you choose).
4. Podcast publishing (RSS feeds & cloud hosts)
If you publish episodes as a podcast, SundayRec generates an RSS feed and uploads the audio file to a destination you configure (your Google Drive, your Dropbox, or another web host). Spotify, Apple Podcasts and other directories then fetch your RSS URL. SundayRec does not host the feed or the episodes itself.
5. Email alerts (SMTP)
You can optionally configure SundayRec to send email alerts to your own address when a recording fails or other error occurs. To do this, SundayRec needs SMTP server credentials (host, port, username, password). These credentials are encrypted using OS-level secure storage, same as OAuth tokens above. Emails are sent from your SMTP server directly to your inbox — SundayRec does not route email through our servers.
6. Webhook URLs
If you configure a Slack, Discord or other webhook for notifications, the URL is stored as plain text in your local settings file (since webhook URLs are themselves the secret). SundayRec posts directly to the URL you supplied. We do not receive or proxy these messages.
7. Auto-update checks
SundayRec periodically checks releases.github.com for new versions of the app. This request includes only generic data (your app version and operating system) and is handled by GitHub's standard release infrastructure. No personally identifiable information is sent.
8. No analytics, no telemetry
SundayRec does not include any analytics SDK, crash-reporting service, or usage telemetry. We do not know how many times you open the app, which features you use, or whether a recording succeeded — unless you explicitly tell us when contacting support.
9. Recording content never leaves your machine (unless you ask)
The audio and video you record stays on your device. The only ways content leaves your machine are:
- You enable cloud backup (goes to your cloud account)
- You enable podcast publishing (goes to your configured host)
- You manually copy or share the file yourself
10. The website (sundayrec.com)
The website is a static site hosted on Cloudflare Pages. Standard server logs (IP address, page requested, user agent) may be retained by Cloudflare for a short period for security and abuse-prevention purposes. We do not run analytics scripts.
If you submit the email-signup form, your address is processed by Formspree and forwarded to us. We only use it to send the release notes you signed up for. Unsubscribe any time by replying to a message.
11. Third-party services used by the desktop app
- GitHub Releases — hosts the app's installer files and update metadata. GitHub privacy policy.
- Google Drive / Dropbox — only if you enable cloud backup. You authorize them, you control the data they hold.
12. Your rights
Because we hold so little data about you, most data-protection rights apply trivially: there's nothing to access, correct, or delete on our side beyond an email address (if you signed up for the mailing list). To remove your email, reply to any list message or contact us at hello@sundayrec.com.
13. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected in the "Last updated" date above.
14. Contact
Questions, concerns, or curiosity about how SundayRec handles data? Email us at hello@sundayrec.com. The app is also open about what it does — the source is on GitHub if you want to verify any of the above.