For school boards
What SundaySaved collects, where it is stored and processed, who processes it, how long it is kept, and how it is deleted — for the privacy officer or IT lead deciding whether staff may use it. Last changed 17 September 2026. The teacher-facing version is Your data.
In one paragraph
SundaySaved is a planning tool for teachers of Ontario Grades 4–8. A teacher signs in with her Google account and builds assessments, lesson plans, worksheets and projects aligned to the Ontario curriculum, and prints them. There are no student accounts and no student-facing content. A teacher may add her class list — names, class, and IEP / ESL / gifted tags — so that material is calibrated to her class; she may also have Sunday mark a class set from photographs. No marks or other assessment records about students are retained: a marked set is handed back to the teacher as a sheet, a spreadsheet and a document, and nothing about a child is kept.
Personal information collected
| About whom | What | Source | Purpose |
|---|---|---|---|
| The teacher | Name, email address (from Google sign-in); how she likes to be addressed; school and board; grades and subjects taught; a monthly count of documents generated; subscription status if she subscribes | The teacher | Account, personalisation, allowance |
| The teacher | Timetable; saved documents and any material she attached; short notes Sunday keeps about her classes and work (e.g. “built a Grade 7 Science quiz on cells”) — never about an individual student. The conversation itself is not stored. | The teacher | The service itself |
| Students | Name; class; a short student number the teacher assigns; structured tags from a fixed list: IEP, ESL/ELL, gifted, learning support, modified, advanced, reading support, writing support, numeracy support, newcomer, extended time, reads ahead | The teacher (typed, or a class list she uploads and confirms) | Calibrating material to the class; matching marked pages to students |
| Students | None retained — see below | — | — |
Not collected: free-text notes about any student; anything a student wrote or composed; photographs or scans of student work (read, then discarded — never stored); dates of birth, OENs, or any board identifier; contact details for students or parents.
Students' work and marking
A teacher may photograph or scan a class set and have Sunday propose marks. Each page image is sent to Google's Gemini service, read, and discarded; SundaySaved stores neither the image nor a transcript of what the child wrote. The teacher reviews the proposed marks and confirms or changes them. On confirmation nothing is stored. The teacher receives the mark sheet, a downloadable spreadsheet, and a marked-work document — a slip per student naming the score, the questions missed and the expected answers, never the child's own words — which exists afterwards only if she saves it to her own Library. This posture is a policy setting, not an accident of code: retention can be enabled for a board that requires records, and is otherwise off.
Where data is stored and processed
| Processor | Role | What it sees | Location |
|---|---|---|---|
| Supabase | Database and storage | Everything stored: your account, timetable, class lists, library, Sunday's short notes. | USA (AWS us-east-1) |
| Vercel | Hosting — runs the app | Every request in transit; stores nothing. | Washington, D.C., USA (Vercel iad1) |
| Google (Gemini API) | Generates documents; reads photos and PDFs you attach | The text and images of each request; not used to train models (paid tier). Not retained by SundaySaved. | USA |
| Google (Sign-in) | Authentication | Your name and email address. | |
| Stripe | Payments, if you subscribe | Payment details; SundaySaved never sees your card. | USA |
The database is hosted by Supabase in the United States (AWS us-east-1, Northern Virginia). The application runs on Vercel in Washington, D.C., USA (Vercel iad1); it processes requests and stores nothing. Generation and reading of attached images are performed by Google's Gemini API in the United States. Under the paid API terms in use, Google does not use data sent through the service to train its models. SundaySaved does not sell personal information, share it with anyone not listed above, or use it to train anything. There is no advertising.
Security
- Sign-in is by Google account only; SundaySaved holds no passwords.
- All traffic is encrypted in transit (TLS); the database is encrypted at rest by Supabase.
- Every table is scoped to the signed-in teacher; row-level security is enabled and the browser never holds a database credential — all access is through the application with a server-side key.
- No student can sign in; there is no student-facing surface at all.
- The person operating SundaySaved can read the database to fix a problem a teacher reports, and does not otherwise.
Retention and deletion
- Data is kept while the account exists, except as noted here.
- A teacher deletes any saved document from her Library; removes a student from her class list (which removes everything about them); or clears her timetable and class lists in Settings.
- Whole-account deletion, from every table, on request to neelay@gmail.com.
- Deletion of a teacher's account cascades to everything stored under it.
Artificial intelligence
Documents are generated, and attached photographs and PDFs are read, by Google's Gemini (model family 2.5). Every output is presented to the teacher for review and editing before use; the interface says so on every screen. Sunday never writes a student's name or tag into material meant for students. AI is used by the teacher only — there is no student interaction with it.
Accessibility
The application and the PDFs it produces are built to the Web Content Accessibility Guidelines 2.0 Level AA, the standard the AODA requires of Ontario's public sector. It has not yet been independently audited against it; we will say so here when it has.
Incidents and contact
A privacy or security incident affecting a board's staff or students would be reported to the affected teachers, and to their board on request, without undue delay and within the timelines the board's agreement requires. Questions, privacy impact assessment requests, and requests for a data-sharing agreement: neelay@gmail.com. SundaySaved is operated from Toronto, Ontario.