What leaves your Mac
Every AI feature of MySunday: what it sends, where it goes, how long it is kept, and how to turn it off. A workspace admin can turn off the features marked so on the workspace's agent settings; your Mac then refuses them before anything is sent. The desktop app shows this same table in Settings → Privacy, with the route your workspace uses.
| Feature | What is sent | Where it goes | How long it is kept | Turn it off |
|---|---|---|---|---|
| Writing text for a box | What you asked for, the box's label, what the box holds and the words around it. The text put in the box is never stored, logged or synced. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. | A workspace admin, on the agent settings |
| The voice conversation | What you said, as text, and short labels of what is on screen (headings, buttons, items you picked). When you ask about your screen, a screenshot of the window you point at, with your pointer's path drawn on it (other apps' windows only with Screen Recording allowed). | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday; the transcript syncs only while 'Sync what I say' is on. A spoken question to Explain is not kept: its answer is kept in Activity on this Mac for 7 days, titled with its first line. | With the feature itself |
| Decision recommendations | The task's instruction, its verification result and the files it changed. In a meeting with "Get ready for answers" on: each line that reads like a question, with up to 12 recent lines of the transcript. | OpenRouter's System One endpoint: a decision model, then a second decision model if the first fails; any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. | A workspace admin, on the agent settings |
| Suggested actions | A short description of what you pointed at: its kind, role and name, and a few words of its text. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. | A workspace admin, on the agent settings |
| Explain, and questions when no coding agent is ready | The text or element you pointed at with its page title and address, your question (typed or spoken) and up to three earlier questions and answers about the same tab, up to three knowledge-base excerpts, and for your own project the source lines around it. For a chart, the value under your pointer; when the AI model set for Explain can see images, a picture of the element with a little space around it (cropped from the browser tab), or the screenshot of the window you pointed at that the Ask hotkey took. For a why or what-happened question, up to three of this tab's recent responses from its own site and its console errors, each up to 4 KB with secrets removed. For "book this" on a date in a message, the text you pointed at and up to 6,000 characters of the message around it, to read the event's title, day, time, place and who to invite. When no coding agent is ready, a question you type with the Ask hotkey, the side panel or the app about text you selected, a page or something you picked sends the same, and for a whole page up to 4,000 characters of its visible text (with secrets removed). | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. The answer is kept on this Mac for 7 days, with your question as its title when you typed it (secrets removed; a spoken question is not kept), so Activity can find it again. A question typed without a coding agent is kept on this Mac with your tasks (30 days by default) and is not synced. | A workspace admin, on the agent settings |
| Rewrite in place | The text you chose to rewrite, up to 1,600 characters of the text around it, and your instruction. For an edit in a Google document, up to 100,000 characters of the document's text around the edit (or the sheet's contents). For a whole form, a form's box labels and what you said for them. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. The proposal is kept on this Mac for 5 minutes. | A workspace admin, on the agent settings |
| Plans of steps and edits in documents | The names of the controls on the page or window, the row a repeated control is in, a screenshot when no password or card box is in view, and for documents the text around the edit. What you asked for goes with it. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. | A workspace admin, on the agent settings |
| AI summaries of meeting notes | The meeting transcript, and the notes you typed during the meeting. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday; the notes stay on this Mac. | A workspace admin, on the agent settings |
| For websites & code | ||||
| Checking a change (verification) | Screenshots of the browser tab before and after the change, the instruction and the page's address. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. The screenshots stay in the task's folder on this Mac. | With the feature itself |
| Failure summaries | The last lines of a failed command or check, with secrets removed. | The AI route your workspace's admin chose; by default OpenRouter, where any OpenRouter provider may receive it and some may retain data. | Not stored by MySunday. | A workspace admin, on the agent settings |
What stays on your Mac
- Your voice (audio): Audio never leaves this Mac while speech runs locally (the default). With a cloud speech engine your admin turned on and you, or your workspace's owner, chose, it goes to that provider (Deepgram, ElevenLabs). Audio is never stored.
- Meeting audio: Your microphone and the system audio of the people on the call stay on this Mac while the meeting is transcribed locally. When your workspace allows cloud speech and you, or your workspace's owner, chose Deepgram, both go to Deepgram while the meeting runs. Meeting audio is never stored.
- Meeting notes and transcripts: Stay on this Mac unless meeting sync is turned on (it is not available yet).
- The work ledger: Stays on this Mac. Exports are files you write yourself.
- Session context (console errors, network calls, pages, copied items): Kept on this Mac with secrets removed while the session lasts; never synced. A page's own responses on any site are kept too (text or JSON, up to 32 KB each, in memory only; never another site's, and password managers and banks keep none) and dropped when the session ends. Before a session, a page's last 20 such responses are held in the page itself until a session starts on that tab (never sent anywhere before); they then join it and are emptied from the page (leaving the page empties them too). Short labels reach the voice model and summaries reach your coding agent when they matter. Explain may read this tab's recent responses and console errors for a why or what-happened question (up to three, 4 KB each, from the last 10 minutes).
- Tasks and page snapshots: Screenshots and the page snapshots a task used stay on this Mac and are removed after the retention period you set (30 days by default). Each task's instruction and the agent's summary of what it did are synced to your account, so they show on the website's Sessions page, and are kept 365 days.
- Screenshots when you ask about the screen: When you point at something and ask about it (this, that, here, a page, a button), ask for a change, or press the Ask hotkey, MySunday takes a screenshot of the window you point at and draws your pointer's path on it, so the AI sees what you mean. Other apps need Screen Recording, which you allow in System Settings (a Chrome tab, never an incognito one, and MySunday's own window do not); a password field, secure input and password managers are never captured. The screenshot goes only with that ask: to the voice model, and to your coding agent when the ask starts a task. It stays on this Mac, is never synced, and is deleted when voice ends, after 30 minutes, or with its task. Your coding agent opens a copy, deleted within 7 days.
- My details: The name, email, phone, address, company and job title you keep for filling in forms stay only on this Mac, with one card for each account, and are never synced. Filling a form matches them to its boxes here, and they go in only after you say yes. They go to no AI model.
- Input tasks: what Sunday puts in a box: When you ask MySunday to put text in a box or do something on screen, the box's label and the app or site stay on this Mac and are never synced. Your account's Sessions page shows only the kind of task, how many boxes or steps it had and how it ended, never the text. To write or change text, your request, what the box holds and the words around it go to the AI model. To do steps on screen, your request and the names of the controls on screen go to the AI model, with a picture of the browser tab unless a password or card field is in view, never what the boxes hold. On banks and password managers nothing from the page goes to a model.
- Walkthroughs you record: When you ask MySunday to record a walkthrough, each click, app or tab switch and each thing you say is a step: a screenshot with your pointer's path, the app, window or page and your words. The steps and their pictures stay on this Mac until you delete the walkthrough, and are never synced. A copied tutorial or a plan made from it goes only where you choose. When you make a plan, your coding agent reads a copy of its pictures, deleted with the walkthrough.
- Commands you ran through 'run': The newest 20 commands, each with its last 2,000 lines of output, secrets removed, stay on this Mac so you can point at one. Never synced.
- Reference images and files: A file or image you give as a reference is kept on this Mac for 24 hours, then removed.
- Activity search: A search index of your tasks, ledger items, meetings, document edits and Explain answers, on this Mac only. Explain answers are kept 7 days.
- Logs: The background service's logs stay on this Mac with secrets removed. They leave only in a diagnostics report you choose to send.
- Figma (optional): A Figma region you take as a reference is a crop of the browser tab, kept on this Mac. Only if you saved a Figma token (kept in this Mac's keychain) does MySunday ask Figma's API for that one node: its values and an image of it. Without a token nothing is sent to Figma.
- Google Calendar (optional): Connected on the website: when you book an event, MySunday reads when you are busy in your primary calendar (busy times only, never your event details) and creates the event you confirmed, with the invite Google sends to the people on it. The key stays in this Mac's keychain; MySunday's servers hold only a sealed copy until this Mac collects it (at most 30 minutes) and refresh access without keeping it. Disconnect on the website revokes it. Without a connection, MySunday reads the busy times shown in your Calendar tab and fills its event form, only after you confirm.
- Usage counts: Token counts, durations and cost per feature go to MySunday for billing. Never the text.