Privacy Policy
Effective date: 17 October 2026 · Revised to disclose all third-party services and add your rights under the GDPR.
1. Who We Are
Sunny is a free, open-source desktop companion built for older adults. It is developed as a community project and is available at github.com/MT25MB/Sunny. There is no company behind Sunny, no sales team, and no account system. Contact details are in section 11.
2. Local-First Design
Sunny runs on your computer. By default, the assistant, screen understanding, your questions, your medication reminders, your preferences, and your logs are all processed on your own machine and are never transmitted anywhere.
A small number of features need information from outside your computer. Those are listed in full in section 4. Nothing on that list runs unless you trigger the feature that needs it.
3. Data We Do Not Collect
Sunny has no server of its own, so there is nowhere for your data to be collected and sent to.
- No personal information. We do not collect your name, email, address, or any identifying information.
- No accounts. Sunny does not require you to create an account or sign in.
- No cookies. Sunny sets no cookies and reads none. It shows no cookie banner because there is nothing to consent to.
- No tracking. There are no tracking pixels, analytics scripts, advertising identifiers, or telemetry.
- No advertising. Sunny shows no ads and shares nothing with advertisers.
- No data selling. Nothing is sold, rented, or licensed to anyone.
- No third-party fonts or scripts. The website serves its own typefaces and images. The application loads no remote code.
4. Network Requests and Third-Party Services
When you use a feature that needs outside information, the request below is made. This table is the complete list.
4.1 Always local
The built-in assistant, screen understanding, voice input, medication reminders, high-contrast and magnification modes, preferences, chat history, and debug logs never leave your computer. Optional local AI through Ollama also runs entirely on your machine.
4.2 What each feature sends
| Feature | Service contacted | What is sent |
|---|---|---|
| Recipe search | DuckDuckGo, TheMealDB | The recipe name or search text you type |
| Weather | Open-Meteo | Your weather location, derived from your IP address |
| Morning digest and news | rss2json.com, then BBC News RSS | The request to fetch the BBC news feed. rss2json.com is an independent third-party service that retrieves the feed on Sunny's behalf, so it can see that this request was made. |
| Weather and local time | ip-api.com | Your IP address, used to estimate your location and timezone |
| Optional cloud AI OpenAI, Anthropic, Groq |
api.openai.com, api.anthropic.com, api.groq.com | Your question, a written description of your screen, and your API key |
| Optional local AI | Ollama, on your computer | Nothing leaves your computer |
4.3 Your IP address
Any request over the internet necessarily reveals your IP address to the service being contacted, including your internet service provider. This is a property of the network, not something Sunny adds. Sunny does not attach any further identifier, cookie, or fingerprint to those requests.
You can avoid every request in section 4 entirely by using Sunny offline. The built-in assistant, screen understanding, and reminders all work with no internet connection at all.
4.4 Turning things off
You can disable these features in Settings. Choosing the built-in assistant or Ollama instead of a cloud provider removes every cloud AI request in section 4.2.
5. Your Rights Under the GDPR
If you are in the European Economic Area, the UK, or Switzerland, the GDPR gives you rights over your personal data.
- Access. You can ask what personal data a service holds about you.
- Rectification. You can ask for inaccurate data to be corrected.
- Erasure. You can ask for data to be deleted.
- Portability. You can ask for your data in a portable, machine-readable format.
- Objection and restriction. You can object to, or ask us to restrict, processing based on legitimate interests.
- Withdraw consent. Where processing relies on consent, you may withdraw it at any time.
- Complain. You may complain to your local data protection authority. In Germany this is the state authority for your region; in the UK it is the Information Commissioner's Office.
Because Sunny keeps everything on your own device, most of these rights are exercised by you directly: delete your chat history, logs, and reminders inside the app, or uninstall it. Uninstalling removes all local Sunny data.
For data held by a third party listed in section 4.2, contact that service directly using its own privacy notice.
6. Children Privacy
Sunny is designed for users of all ages, including older adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us and we will help you remove it.
7. Data Retention
Because data stays on your computer, you control retention. You can delete medication reminders, chat history, and debug logs at any time within Sunny. Uninstalling Sunny removes all local data associated with the app.
8. Security
Credentials you choose to store, such as an optional API key, are encrypted using your operating system's built-in encryption via Electron safeStorage: the macOS Keychain, DPAPI on Windows, and libsecret on Linux. Credentials are never transmitted to Sunny developers.
Sunny blocks terminal commands, passwords, credential entry, network scanning, and similar actions, and asks for your approval before anything sensitive. It also treats text read from your screen as untrusted input and screens it for prompt-injection attempts. These are risk-reduction measures, not a guarantee that no vulnerability exists.
9. International Transfers
Several services in section 4.2 are operated outside the European Economic Area, including rss2json.com, ip-api.com, and the optional cloud AI providers named above. Where data is transferred to a country without an adequacy decision from the European Commission, it is protected using an appropriate safeguard such as Standard Contractual Clauses, or is sent only with your explicit consent after you opt in.
10. Changes to This Policy
We may update this policy as Sunny changes. The current version is always published at mt25mb.github.io/Sunny/privacy-policy.html, and the effective date at the top of this page shows when it last changed.
11. Contact
Sunny is maintained by volunteers and has no postal address. For any privacy question, or to exercise a right in section 5, open an issue at github.com/MT25MB/Sunny/issues.