Privacy
Last updated 7 October 2026
The Sunday Queue is a dating service operated by David N., an individual based in Vancouver, British Columbia. This policy describes what we collect, how long we keep it, and what happens when you ask us to delete it.
We are a small pre-launch product running a closed pilot. Where this policy is uncertain, we have said so rather than smoothing it over.
What we collect
- Your email address, used to sign you in.
- Your phone number. It is verified to help prevent duplicate and banned accounts and to send you account notifications. Verification does not establish someone's identity or serve as a safety check. We store your number in a scrambled form that cannot be reversed.
- Your profile — name, date of birth, gender and orientation, and whichever optional details you choose to add (height, hometown, languages, job, education, smoking, drinking, pets, children, ethnicity, religion). The optional ones are exactly that: leaving any of them blank is a supported answer.
- Your photos and prompt answers. Photos are stored privately and are only ever served to you and to the people whose introductions include you, through short-lived links that expire in about a minute.
- What you do in the app — who you were shown, what you decided, and whether you matched. The next section says why.
What you do here, and why we keep it
Every round, we record who you were introduced to, the order they came in, and what you decided about each one, along with whether you matched. It isn't a byproduct: it's what stops someone you already passed on coming round again, what keeps your yeses limited to the number you get, and what tells us whether a round worked at all.
What we don't do with it matters more. We don't sell it, and nobody outside this service is shown it. There is no advertising here to target. You are not a product. We don't build a profile of your tastes, and we don't rank anyone by how often they're chosen. The order of your introductions is random and means nothing.
This data stays for as long as your account does, and it is deleted when your account is.
Why we don't just delete it every week, like the chats. A pass or a match between two people keeps you from being shown each other again for four rounds, and a block does it permanently. Those rules can only work if there's a record of what happened. Deleting the record each week would mean everyone you'd already turned down could return the following Monday.
You will not be introduced to the same person again for four rounds, whether you passed on them or matched. A block is permanent: neither of you will be shown to the other again, and deleting your account and starting over will not undo it.
Sensitive information
Some of what you tell us is sensitive, and most of it is optional. Your gender, who you want to be introduced to, your ethnicity, and your religion are used to determine which introductions fit the preferences you set and the preferences set by the other person. They are not used for advertising, shared with others, or searchable. Ethnicity and religion are optional, and leaving them blank does not prevent you from joining a round.
Your orientation is shown on your profile to the people you're introduced to. It does not determine who you are introduced to — that is based on your gender and who you choose to be introduced to.
Your conversations are deleted every week
This is the central thing about the product rather than a footnote. Every match's messages are permanently deleted on Sunday night. We do not archive them, we do not keep a copy, apart from the backups described below, and we cannot recover them for you afterwards. If you want to keep talking to someone, exchange contact details before then. We warn you before the deadline.
⚖️ Three things survive that deletion, and we would rather state them than let you discover them:
- The fact that you and another person matched. Not the conversation — just the record that it happened. We need it so the system does not show you the same person again.
- Conversations captured by a report. If someone reports a conversation, we save a copy of it at that moment so it can be reviewed — without this, weekly deletion would mean there was never anything left to investigate. That copy is not kept forever; how long depends on what the review found, and If you are reported below sets out the periods.
- Our backups, for up to seven days. Our database is backed up once a day and each backup is kept for seven days, so a conversation deleted on Sunday still exists inside a backup until the following Sunday. Nobody reads backups. They exist only so the service can be restored if something fails, and each one is deleted after seven days.
Text messages
We do not sell your mobile number, and we do not share it with third parties for marketing purposes. We share it only with the messaging provider that delivers our texts on our behalf, and only so that they can deliver them.
Message frequency varies. You will receive a verification code when you sign up, and at most two notification messages in any week: one if you match with someone, and one warning you that your conversation is about to be deleted.
Message and data rates may apply. Reply STOP to any message to stop receiving texts, or HELP for help.
If you reply STOP, we will stop texting you — but the two notifications above are ones we consider it wrong to skip, so we will send them to your email address instead.
If you are reported
A copy of the conversation is taken at the time of the report, so that weekly deletion doesn't leave nothing to review. What happens to that copy depends on the outcome: if the report is dismissed, it is deleted after 90 days; if it results in a suspension, it is kept for two years because the decision may be disputed and the evidence needs to remain available during that period. If a report about you is dismissed and you have since deleted your account, the copy is deleted on the next scheduled sweep rather than waiting out the full 90 days.
After that, only the fact of the review remains: that a report was made, when it was made, what it concerned, and what was decided and by whom. The conversation is deleted, along with what the reporting person submitted. Deleting your account does not shorten either retention period.
What you write in an appeal is deleted along with the evidence from the report. The outcome and the reviewer's reason are kept as the record of the decision.
Deleting your account
You can delete your account at any time, and doing so genuinely removes your profile, your photos, your prompts and your messages.
If you delete your account while a report about you is still being looked at, or while your account is suspended, we keep a one-way scrambled form of your phone number so that number cannot be used to sign up again — deleting is not a way around a review or a decision. It cannot be turned back into your number, and it is not linked to your deleted profile.
Deleted information doesn't vanish from our backups straight away. Our database is backed up once a day and each backup is kept for seven days, so what you delete can remain in a backup for up to a week before it is gone for good. Your photos are not in those backups: a deleted photo is gone within minutes. If we ever have to restore the service from a backup, we will delete again anything that had already been deleted.
If you would prefer to step away without deleting anything, you can pause your account instead — though not while you are in the middle of a match, and not while you are suspended or sitting out a cooldown. A paused account is skipped by the weekly round and keeps nothing running.
How long we keep things
| What | How long |
|---|---|
| Your profile: name, age, gender, region, bio | While your account exists |
| Orientation, ethnicity, religion, and your preferences about them | While your account exists — and optional to give |
| Photos | While your account exists. A deleted photo's file is deleted with it |
| Prompt answers and weekly check-in answers | While your account exists |
| Email address | While your account exists |
| Phone number | Stored only in a scrambled form that cannot be reversed, while your account exists |
| Messages | Deleted every Sunday at 8pm, for everyone |
| Who you were shown, what you decided, and whether you matched | While your account exists |
| A pass or a match between two people | Four rounds, then it lapses |
| A block | Permanent |
| A reported conversation | Until it is reviewed; then 90 days if the report is dismissed, two years if it led to a suspension |
| The record of a review: that a report was made, when, what it concerned, what was decided and by whom | Indefinitely |
| A scrambled phone number, if an account is deleted while under review or suspended | Indefinitely. It cannot be turned back into your number |
| Notifications we sent you | While your account exists |
| Backups of everything above except photos | Seven days |
Your information is yours to see
You can ask us what personal information we hold about you and ask for a copy. You can ask us to correct anything that is wrong or incomplete. You can update your profile, prompts, preferences, and photos yourself in the app; your birthdate and phone number cannot be changed there. If either is wrong, email support@sundayqueue.com.
You can withdraw your consent where the law allows, and ask us to delete your account and your information. A few things may outlast a deletion: evidence attached to a report, the record of a moderation decision, and, if your account was removed for conduct, the scrambled phone number used to prevent the account from being created again. The table above explains how long each is kept.
Who else handles your information
- Supabase — our database, your photos, and signing in. Held in Canada.
- Vercel — hosts the website and the app. United States.
- Twilio — text messages. United States.
- Resend — email. United States.
- Your browser's push service (Apple, Google or Mozilla) — push notifications, only if you turn them on.
- Stripe — payments, only once paid regions open. Nothing is charged during the pilot.
A provider outside Canada handles information under the laws of its own country, which can include access by that country's authorities.
Payments
We do not take payments yet. When we do, they will be handled by Stripe, and your card details will go to Stripe, not to us. We will never see or store your full card number.
To prevent fraud, Stripe collects information about your device and browser, and how you use the checkout page, when you pay. Stripe uses this for its own fraud prevention and security, under Stripe's privacy policy, and it may be processed outside Canada. We do not collect that information ourselves.
From Stripe we will keep a record of your payment and a card fingerprint, a code that identifies a card without revealing its number. In the cases described under Deleting your account where we keep a scrambled form of your phone number, we will keep that fingerprint alongside it, for as long as we keep the phone number, so neither can be used to sign up again. A record of the payment itself may be kept longer where tax law requires it.
Who can see your profile
Only people the system actually shows you, one at a time, and only while you are in each other's introductions. There is no public profile, no browsable directory, and no way to look someone up. Nobody is told that you accepted them unless they accept you too.
Changes, and how to reach us
We will update this page when the product changes and note the date at the top. For any question about your information, or to ask for it to be deleted, email support@sundayqueue.com.
See also our terms of service.