Sonderous Starter — Privacy Policy

Effective date: September 20, 2026 · Last updated: October 1, 2026

Who we are

Sonderous Starter is made by Sonderous Systems Inc., a corporation incorporated federally in Canada under the Canada Business Corporations Act on August 31, 2026, registered in Ontario (Ontario Corporation Number 1001732009), with its office at 1416 McGregor Ave, Thunder Bay, Ontario P7E 5E6, Canada. Our Privacy Officer is Nolan Dennhardt, reachable at [email protected]. This policy explains what the Sonderous Starter app collects, why, where it goes, and what you can do about it.

What Sonderous Starter does

You connect a mailbox — for work, for your personal mail, or both. The app reads new messages, decides which ones need your attention, tells you, talks a reply through with you and writes it, and keeps a to-do list you add to by typing or by talking. A reply leaves your mailbox only when you tap Send on it, exactly as shown to you; otherwise it waits in your own Drafts folder.

What we collect

Account information you give us: your email address, your name, and your business name. We verify your address by emailing you a code, and you sign in the same way: a one-time code sent to your email.

A connection to your mailbox: when you connect Gmail or Microsoft, your provider gives us a token that lets the app read your mail, create drafts, and send the replies you approve. We store that token encrypted. You sign in on Google's or Microsoft's own page; we never see that password. When you connect any other mailbox — for example email that came with your website's domain (Network Solutions, GoDaddy and others), iCloud or Yahoo — you give us that mailbox's password, or an app password your provider makes for us. We check it with your mail provider over an encrypted connection, store it encrypted, and use it only to read your mail, save drafts, send the replies you approve, and mark an email as read in your mailbox when you open it in the app. We never show it back to anyone, and we delete it when you disconnect that mailbox.

What we decide about your mail: for each message the app processes we keep the message's provider identifiers, the sender's name and address, the names and addresses of the people it was sent to and copied, the subject line, the time received, our classification (for example "needs you" or "newsletter"), a one-line summary we write, any to-do we suggest from it, and whether a reply was drafted or sent — including who each reply you send went to and who you copied — along with what you did about it (dismissed, handled, sent) and when. This history is what lets you look back through your mail and search it by person, including who was copied.

What we do not keep: the body of your messages and their attachments are read while the app processes them and are discarded within 15 minutes. They are not stored in our database, our backups, or our logs. When you talk a reply through, the conversation is held on your phone and sent to our AI provider to answer you; we do not store it. We keep no photos and no payment details: your free month needs none. Before you are ever asked to pay for a subscription, this policy will name who processes the payment. A personal mailbox can hold sensitive things — health, family, money. We handle them exactly like everything else here: the message itself is read, used to help you, and discarded within 15 minutes; what we keep is only what this policy lists.

Your voice, if you use the microphone: when you tap the microphone, your phone turns what you say into text on the phone itself. The audio never leaves your phone and we never receive it; the app only uses your phone's on-device speech recognition and does not offer the microphone on a phone that can't do it on the device. What reaches us is the text you then send, exactly as if you had typed it.

Contacts: a list of the people who email you, built from your own mail: address, name, first and last seen, how often, and whether you chose to hide their mail in the app. This is what lets the app tell a person from a newsletter.

Your to-dos, and the notes you choose to keep about the people who write to you (for example, a date they mentioned or where the job is), so the app can bring them up the next time they write. A to-do or a note is kept only when you tap to keep it.

Usage and device information: counts of what the app did for you (messages processed, requests made), the cost of the computing behind them, your device's push-notification token, app version, and crash or error diagnostics. Diagnostics are used only to fix problems and are never used to train AI models.

Why we use it

To provide the service: read, classify, summarize, talk a reply through, write it, send it when you tap Send, remind.
To send you notifications you have turned on.
To keep the service fair for everyone: usage counts decide whether automated or extreme use is slowed. We look at amounts and patterns, never at content, to do this.
To keep the service working: diagnostics, security, backups.
To tell you about the full Sonderous platform if you ask us to. We do not send marketing email without your consent, and every marketing message identifies us and includes a working unsubscribe.

We do not sell your information. We do not use your information to build profiles for advertising.

Who else processes it

Your mail provider (Google, Microsoft, or whoever hosts your email): we read from your mailbox, write drafts to it, and send the replies you approve from it, using the permission you granted. You can take that permission back at any time by disconnecting the mailbox in the app. For Gmail or Microsoft you can also do it in your account settings there; for any other mailbox, changing its password cuts us off.
Anthropic, PBC (United States): the AI provider that reads message content to classify and summarize it, and to talk a reply through with you and write it (with the notes you keep about that sender). Message content is sent to Anthropic's API for processing and is not used to train their models. Under their standard terms it may be retained by Anthropic for up to 30 days for abuse monitoring. This means content leaves Canada during processing.
Amazon Web Services (Canada Central region): hosts our servers and database in Canada.
Expo (650 Industries, United States), Apple and Google: deliver push notifications to your phone — Expo passes each one to Apple or Google (the notification text is limited to what you would see on the card: who the email is from and our one-line summary).
Cloudflare: network and security services in front of our website and operator tools.

Google API Services — Limited Use. Sonderous Starter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: Gmail data is used only to provide the features you see, is never sold, is never used for advertising, and is read by a human only with your permission, for security, or as the law requires.

Where it lives and how it is protected

Our servers and database are in Canada (AWS Canada Central). Every record is tagged with your account and the database itself refuses to return one account's rows to another. Your mailbox token or mailbox password is encrypted with a key that is not stored with the data. Disks and backups are encrypted. Our servers have no open administrative ports. Our staff cannot read your mail index without a logged, exceptional grant; day to day they see counts and costs only.

How long we keep it

While your account is active. If your free month ends and you do not subscribe, we keep your account for 90 days so you can export it or subscribe, then delete it. If you disconnect a mailbox, its index stays so your to-dos and history keep working, until you delete it; disconnecting a mailbox deletes its saved password. If you delete your account, every row tied to it is removed immediately and a mailbox token is revoked at your provider; encrypted backups — which hold a mailbox password only in its encrypted form, never with the key — age out within 30 days. Diagnostics are kept for 90 days.

Your choices and rights

Export: one tap in Settings produces a file with everything we hold about you.
Delete: one tap in Settings deletes your account and everything in it, and revokes our access to your mailbox. We may ask you to confirm by email code.
Disconnect: remove a mailbox at any time; the app stops reading it immediately.
Notifications: on or off, per kind, in Settings and in your phone's settings.
Access and correction: email [email protected]. We answer within 30 days.
Withdraw consent: disconnecting or deleting withdraws it. Some features cannot work without the data they need; we will tell you which.
Complaints: contact our Privacy Officer first. You may also complain to the Office of the Privacy Commissioner of Canada, and, if you live in Quebec, to the Commission d'accès à l'information.

Quebec residents

If you live in Quebec, the rights above include the right to data portability in a structured format and the right to be informed about automated decisions. Our classification of your mail is an automated decision that affects only what the app shows first; you can always see every message in your mailbox, and you can ask us how a classification was made.

Children

Sonderous Starter is for adults. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect, and we will keep earlier versions available on request.

Contact

Sonderous Systems Inc. · 1416 McGregor Ave, Thunder Bay, Ontario P7E 5E6 · [email protected] · Privacy Officer: Nolan Dennhardt