Privacy Policy

Last updated October 15, 2026

The Sunday Board is a tracker for friendly sports picks among people who know each other. It is not a sportsbook — no bets are placed and no real money changes hands on the platform itself. It is built and operated by Volocent Labs LLC, a Pennsylvania limited liability company ("Volocent Labs", "we", "us"), which is responsible for the information described here. This page covers the website and the mobile app, and explains what information they collect and how it's used.

What we collect

• Sign-in account info — when you sign in with Google, Google shares your name, email address and profile picture with the app. When you sign in with Apple, Apple shares the email address you choose (your own, or a private relay address if you pick Hide My Email) and, the first time only, your name. This is used to create your account and identify you to friends on a shared dashboard.
• Profile details you add — a profile photo you upload (stored by us until you remove it with “Remove photo” in Edit profile or delete your account), a bio, favorite teams, your usual bet size and default sportsbook.
• Bet data you enter — picks, stakes, and outcomes typed in by you or another member of your dashboard, plus things like notes, starred bets and line watches. This is the core content of the app.
• Friend and dashboard relationships — who you're connected to and which shared dashboards you belong to.
• Feedback — if you send feedback through the app, we store the message and the details it includes. If you requested an invite back when the site was invite-only, we kept the name, email, and message you provided.
• Push notification token — if you turn on phone notifications in the app, your device gets a push token from Google's Firebase Cloud Messaging, which we store with your account. It's used only to send the notifications you've turned on in Settings, and it's removed when you sign out of the app or delete your account. Your notification choices are stored with your account too.
• Usage records — which days you used the app and when you were last active, and a count of how often you use the screenshot and text import (with timing and whether it worked). We use these to run the service and to understand how it's used.
• Error reports — if the app hits an error, it sends us the error message, technical details (the code location, the page, and your browser or device type), and your account ID if you're signed in, so we can fix it.
• Basic technical data — your IP address is briefly checked against rate-limit counters (for example on sign-in attempts and error reports), to prevent abuse. It is not stored long-term or tied to your profile.
• Visit counts — the website counts distinct visitors per day using a random ID in a cookie (see Cookies below). For each day it also notes the country the visit came from, the kind of device (phone, tablet, computer or our app), which part of the site it landed on, and the short link code it arrived with, if any. Only that link code is copied to your account when you sign up; the rest isn't linked to your account.
• Basic site-performance analytics — anonymous, privacy-first page load metrics via Cloudflare Web Analytics. This does not use cookies and does not identify individual visitors.

Importing a bet from a screenshot or text

When you use Import a bet, the screenshot (or the text you type) is sent to an AI model run by Cloudflare (Workers AI) to read the bet. The image is never saved: it's read for that one request and then discarded. What's read is shown to you to check, and nothing is added to your board until you save it. If you choose to send feedback about an import, the text that was read goes with it. The image goes only if you tick “Include the screenshot” when you send that feedback: then it's kept privately, seen only by us, for 30 days to fix the reader, and then deleted (sooner if you delete your account).

Signing in

You create an account by signing in with Google or with Apple — there is no separate password to set or store, and the app never sees or stores your Google or Apple password. With Google, Google shares your name, email address and profile picture. With Apple, Apple shares an email address and, on your first sign-in, your name; if you choose Hide My Email, we only ever see a private relay address, and Apple forwards our emails to you. We keep a token from Apple so that when you delete your account we can tell Apple to remove The Sunday Board from your Apple ID. If you chose Hide My Email, you can optionally give us another email address for our emails: we send a one-time code to confirm it's yours, use it only to deliver The Sunday Board's emails (never to sign you in or to let others find you), never show it to other users, and delete it when you remove it or delete your account. The app uses this information only to create and identify your account. If sign-in doesn't work in the app, you can sign in with a code instead: the app shows a short code, and you approve it in your web browser by signing in there.

One separate email-and-password account exists only so app store reviewers can test the app; no other account can sign in with a password.

The Sunday Board's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. Your Google account info is used solely to run this app for you and is never used for advertising, and never sold or shared with any third party for their own purposes.

Emails

We send emails to the address on your account: a short Sunday email (the day's NFL slate, last week's biggest win, and your own open bets and season), which is on by default and can be turned off with Unsubscribe in any Sunday email or in Settings, and notices about your account such as friend requests and invite links. A friend can also use the app to send a one-time invitation email to an address they enter.

If you sign up to beta test our apps, the emails you enter for that (your Apple ID, Google account or Roku account email) are used only to invite you to test builds.

Cookies and storage on your device

The website sets these first-party cookies:

• bb_session — keeps you signed in between visits. It identifies your session to this app's own server only.
• bb_oauth — a short-lived cookie (10 minutes) used only while you're signing in with Google, to keep that sign-in secure.
• bb_oauth_apple — a short-lived cookie (10 minutes) used only while you're signing in with Apple, to keep that sign-in secure.
• bb_visitor — a random ID used only to count distinct visitors per day. It isn't linked to your account and lasts up to 400 days.

In the mobile app, your sign-in is kept on the device in the app's own storage instead of a cookie. The website and apps also remember some settings on your device, such as display options. None of these are used for advertising, shared with any third party, or used to track you across other sites.

What we don't do

• We don't sell or share your data with third parties for advertising.
• We don't show ads.
• We don't process payments or handle real money — bets tracked here are informal and between the people using the app.
• We don't use tracking cookies or third-party ad trackers.

Third-party services we use

A small number of infrastructure providers process data on our behalf, only to run the app itself — none of them can use your data for their own purposes:

• Google — sign-in, and delivering push notifications to your phone (Firebase Cloud Messaging).
• Apple — Sign in with Apple, and forwarding our emails to you if you use Hide My Email.
• Cloudflare — hosting, database, the AI model that reads imported bets, and the privacy-first analytics mentioned above.
• Resend — delivers the emails the app sends you (the Sunday email, invite links, friend-request and feedback notifications).
• National Weather Service (api.weather.gov) and MET Norway (api.met.no) — game-day weather forecasts. We send them stadium coordinates only, never anything about you. MET Norway's forecasts are licensed under CC BY 4.0.

How your data is stored

App data, including uploaded profile photos, is stored in a Cloudflare D1 database tied to this app. All data is sent over encrypted connections (HTTPS). Emails are sent through Resend. Sign-in is handled by Google or Apple — this app never sees or stores your Google or Apple password.

What other users can see

Only people who share a dashboard with you can see your entries on that dashboard. What another user sees of your account itself is your name and profile picture — in search results, friend requests, and dashboard member lists. Friends can see your profile (bio, favorite teams, trophies); who can see your bets and your friends list follows the privacy settings you choose (friends, mutual friends, or nobody), and someone who isn't your friend sees only a small card. Your email address is never shown to other users, only to the site admin, though someone who already knows your exact email address can find your account by searching for it.

The season leaderboard is visible to every signed-in user and shows each listed person's name and season profit. Accounts are on it by default; you can opt out (and back in) any time from the Season tab. The week's single biggest winning bet is also shown to all users and in the Sunday email — with your name only if you're on the leaderboard, and never with your name in the email.

If you turn on a public share link (sharing a bet, your wins, or your season), anyone with that link can see what it shows until you turn it off.

The Forum is shared by everyone on The Sunday Board: a post or reply you write there is visible to every signed-in user, with your name and profile picture. You can delete your own posts and replies at any time (and edit a post in the first 15 minutes), report anyone else's, and block a person so you no longer see theirs. Reported posts are reviewed and may be removed. Deleting your account deletes your Forum posts and replies too.

Access and deletion

You can delete your account and its data yourself: open the account menu, choose Settings, then “Delete my account” at the bottom, or go to thesundayboard.com/delete-account. That removes your profile, photo, friends, notifications, push tokens and bets, including your bets on shared boards, and your feedback with any screenshot you sent with it. Error logs and usage counts we keep for running the service lose any link to you. To request a copy of your data, or if you can’t sign in, email support@thesundayboard.com from the address on your account.

Children's privacy

The Sunday Board is for adults 18 and older and is not directed at children. We do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes in any meaningful way, the "last updated" date above will be revised. Continued use of the app after a change means you accept the updated policy.

Contact

Questions about this policy or your data: contact@volocent.com.

Volocent Labs LLC