Privacy Policy

Effective October 20, 2026

Sonny is an AI assistant for real estate agents. It runs on the agent's own Mac and works across the tools the agent already uses. This policy explains what information Sonny handles, why, where it's kept, who helps us process it, how long we keep it, and the choices you have.

Sonny is operated by Christian Daugherty ("Sonny," "we," "us," "our"). Sonny is currently a private beta, so this policy will change as the product does. When it changes in a material way, we'll tell you before the change takes effect (see §16).

The short version

• Most of your Sonny data lives on your own Mac.
• We don't sell your information or your clients' information, and we don't use it for targeted advertising.
• We use Anthropic's Claude models to do Sonny's AI work. Under Anthropic's commercial terms, our requests aren't used to train its models, and Anthropic deletes them within 30 days by default, with limited exceptions.
• Sonny sends messages to your clients and contacts only after you approve them.
• If you connect Gmail, Sonny uses your Google data only to provide the Gmail features you see in Sonny (§5).
• Questions or requests: privacy@meetsonny.com.

1. Who this policy covers

This policy covers:

• real estate agents and teams who use Sonny ("you")
• visitors to meetsonny.com
• people who ask to join the beta

It also explains how Sonny treats information about your clients and contacts that you connect to Sonny (for example, the contacts in your CRM). If you're a client of an agent who uses Sonny, see §14.

2. Information you give us

• Account and profile details. Examples: your name, brokerage, work email, mobile number, market, teammates, and the last four digits of a personal phone number used for account protection.
• Content you create in Sonny. Examples:

  • your conversations with Sonny
  • notebook entries and reminders
  • showing debriefs and building notes
  • deals and commission details
  • anything else you type or save in Sonny
• Support and feedback. What you send us when you ask for help, report a problem, or give feedback.

3. Information from the services you connect

Sonny works inside services you already use, with your permission. The services you connect are yours: you choose them, and their own terms and privacy policies still apply.

• Your CRM (Follow Up Boss). Sonny reads and updates your CRM on your behalf. That includes:

  • contacts, notes, texts, calls, appointments, deals and stages
  • lead activity

  It uses Follow Up Boss's official connection with your key, and a browser signed in as you, and keeps working copies on your Mac.

• Your Mac's Messages and call history. With your permission (macOS Full Disk Access), Sonny reads your Messages and call history to spot conversations that need you. It also builds a writing-style profile from the texts you've sent, so its drafts sound like you. Texts to your clients go through your CRM, and only after you approve them.
• MLS, property and showing information. For listings and showings you're working on, Sonny saves:

  • MLS listing sheets, including copies saved as PDFs
  • public listing information from Zillow
  • showing access details from ShowingTime

  When it prepares a showing on your calendar, Sonny can also request the showing appointment in ShowingTime, unless you tell it not to. Client packets Sonny prepares are shared with your clients only when you send them.

• Email. If you connect Gmail, see §5.

Your sign-ins for your CRM, MLS and ShowingTime are stored on your Mac and are never stored on our servers. The one exception is Gmail when you use Connect Gmail (§5).

4. How we use information

We use information to:

• Run Sonny for you. That means:

  • preparing showings
  • tracking leads and follow-ups
  • drafting messages and emails for your approval
  • keeping your notes and reminders
  • answering your questions
  • running the actions you ask for
• Keep Sonny working. That means finding and fixing errors, and giving you support.
• Protect your account and the service.
• Communicate with you about Sonny and your beta access.
• Improve Sonny, using the feedback you give us and the diagnostics described in §7. We don't train AI models on your data or your clients' data.

5. Google user data (Gmail)

Connecting Gmail is optional. This section explains exactly what Sonny does with your Google data if you connect it.

What Sonny accesses. When you choose Connect Gmail, Google asks you to allow two permissions:

• Read your email (gmail.readonly). Sonny can read and search your messages and threads, including:

  • senders, recipients, subjects and message text
  • attachments, and the thread a message belongs to
• Create drafts and send email (gmail.compose). Sonny can:

  • save drafts in your Gmail
  • send email from your account
  • reply within an existing thread

Sonny doesn't ask for permission to delete, archive or relabel the emails in your mailbox, and it can't. Google sign-in isn't used to log in to Sonny; Gmail is a service you connect to Sonny.

Why and how Sonny uses it. Sonny uses your Gmail data only to provide the Gmail features you see in Sonny:

• spotting new-lead emails and client emails that need your attention, and showing them in your notification centre and to-do list
• creating follow-ups from lead emails
• answering your questions about your email when you ask Sonny
• saving showing-prep and client-packet drafts to your Gmail Drafts folder, for you to review and send
• sending emails on your behalf only after you approve that exact email. The approval shows:

  • the full message, including recipients, subject, text, attachments and thread
  • any change after you approve needs a new approval

  Reports Sonny sends only to your own Gmail address, such as your morning market digest, don't need a separate approval each time.

AI processing. To do these things, Sonny sends the relevant parts of your email (for example, a message's sender, subject and text) to Anthropic, our AI provider, for processing. Anthropic processes this content under its commercial terms: it isn't used to train Anthropic's models, and it's deleted within 30 days by default, with limited exceptions (for example, content flagged for misuse or retention required by law). Neither Sonny nor Anthropic uses your Google data to develop, improve or train AI or machine-learning models.

Where it's stored.

• Your Google authorization (the token that lets Sonny reach your Gmail):

  • stored encrypted on Sonny's secure cloud service, never on your Mac
  • deleted when you disconnect
• Your email:

  • Your Mac requests it from Gmail through Sonny's secure cloud service, which passes it through and doesn't keep it.
  • Sonny works with it on your Mac.
  • Short excerpts Sonny shows in your notification centre are deleted after 30 days.
  • Your conversations with Sonny, which may mention your email, are kept for 90 days.
  • Notes and reminders you choose to keep stay until you delete them.
• An email waiting for your approval:

  • stored encrypted on Sonny's secure cloud service
  • deleted as soon as it's sent, or after 24 hours if you don't approve it
• Approval records: we keep a record of each approval for 1 year, then delete it automatically. The record covers:

  • which email account
  • when it was approved
  • who approved it
  • a fingerprint of the email that proves it wasn't changed
  • the Gmail thread ID
  • the result

  These records don't contain the email's text.

• Daily send counts: we keep a count of how many emails Sonny sent each day, with no content, for 30 days.

Sharing. We don't sell your Google data, and we don't use it or transfer it for advertising, including targeted advertising. We don't share it with anyone except:

• the service providers that run these features (Anthropic for AI processing, and Cloudflare, which hosts Sonny's secure cloud service), under their own data-protection commitments
• when you ask us to (for example, an email you approve)
• when the law requires it
• to protect against security threats or abuse

No person at Sonny reads your Gmail data unless:

• you ask us to, for example for help with a specific message
• it's needed for security, such as investigating abuse
• the law requires it

Limited Use. Sonny's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion. You can disconnect Gmail at any time in Sonny's Setup page, under Gmail, by choosing Disconnect. When you disconnect, Sonny:

• revokes its access with Google
• deletes your stored Google authorization
• cancels and deletes any emails still waiting for your approval

You can also remove Sonny's access from your Google Account at https://myaccount.google.com/permissions. Disconnecting doesn't change or delete anything in your Gmail. Email excerpts already on your Mac are deleted on the schedules above. Approval records are deleted when they reach 1 year. To have them deleted sooner, email privacy@meetsonny.com.

If you connect Gmail with an app password. Some beta Macs still connect Gmail with a Google app password instead of Connect Gmail. In that case:

• the app password is stored only on your Mac
• your Mac reads your email directly from Google
• Sonny uses the email it reads in the same ways and keeps it for the same periods described above

To disconnect, remove it in Sonny's Setup page or revoke the app password in your Google Account.

6. AI processing

Sonny uses Anthropic's Claude models, through Anthropic's commercial API, to understand requests, read and summarize information, and draft text. To do that, Sonny sends Anthropic the information a task needs. That can include:

• CRM details
• messages
• email excerpts
• property information
• your instructions

We use Anthropic to process requests. Under Anthropic's commercial terms, our inputs and outputs aren't used to train its models, and Anthropic deletes them within 30 days by default, with limited exceptions (for example, content flagged for misuse or retention required by law).

Our AI routing service is set up so it doesn't log or cache the content of these requests. Sonny's AI tools also keep temporary working records on your Mac, which are cleaned up automatically.

AI can make mistakes, so please review what Sonny prepares. That's one reason messages to your clients and contacts wait for your approval.

7. Diagnostics

Diagnostics help us catch errors and keep Sonny working. They're on by default, and you can turn them off at any time in Sonny's Setup, or in Settings on your phone or Mac. Nothing is sent before you reach the diagnostics step in Setup.

Diagnostics are linked to your installation, so we can help when something breaks. They include:

• A regular health check, every 15 minutes:

  • app version and service status
  • the result of the last showing prep
  • uptime, macOS and software versions
  • free disk space
• Error reports: which part of Sonny had a problem, the error, and a limited excerpt of that part's error log.
• Short notes when Sonny couldn't complete a task, with the names of the tools involved.
• Event names, such as which feature ran.
• Anything you type into a problem report yourself.

Before anything is sent, Sonny automatically removes:

• email addresses, phone numbers and street addresses
• unit numbers, CRM links and IDs, long numbers and file paths
• any client name it finds in your data

This filtering is thorough but automated, so it may not catch everything.

Diagnostic records are deleted after 30 days. A basic record that your installation exists is kept so health checks can be matched to it. If your Mac stops checking in, we get an automatic alert that names only your installation's identifier.

8. Our website

meetsonny.com doesn't use analytics, advertising pixels, cookies or browser storage, and it serves its own fonts. Our hosting provider, Cloudflare, processes standard request information, such as IP addresses, to deliver and protect the site, under its own terms.

Some Sonny app pages load fonts from Google, which means Google receives the visitor's IP address. Those pages include the download page and the phone, desktop and notebook pages.

9. Service providers

We use a small number of service providers to run Sonny. They process information only to provide their services to us:

We also distribute Sonny's software and updates through GitHub and npm. They don't receive your Sonny data.

The services you connect (Follow Up Boss, your MLS, ShowingTime, Zillow, and Gmail) aren't our service providers. You choose them, and their own terms and privacy policies apply.

10. We don't sell your data or use it for ads

We don't sell your personal information or your clients' personal information. We don't use your data or your clients' data for targeted advertising, and we don't share it with advertising platforms.

11. Backups

Sonny backs up the data folder on your Mac every night. Backups:

• cover deals, reminders, showings, debriefs, calls, notes and sync data
• don't include your sign-ins, your profile, logs, your conversations with Sonny or your notification centre
• are encrypted on your Mac before they're uploaded to private storage with our backup provider

During the beta, the Sonny team holds the keys to your backups so we can restore them for you. We access your backups only to restore them for you or to keep them working.

Backups keep rolling copies for about six months: 7 daily, 4 weekly and 6 monthly.

12. How long we keep information

Our hosting and service providers keep their own operational logs on their own schedules.

13. Beta requests from our website

If you ask to join the beta, we collect:

• your name
• work email
• market
• what you'd hand Sonny first
• which page you used to send the request

Cloudflare Turnstile checks that the request comes from a person. It processes browser and device signals to do this. We don't store your IP address. We get a notice that a new request arrived, without your details in it.

Requests we haven't acted on are deleted after 12 months. Once we approve or decline a request, it's deleted 30 days later. If you join, your details move into your Sonny account under this policy.

14. If you're a client of an agent who uses Sonny

Your agent decides which of their tools Sonny works with. Sonny processes your information on your agent's behalf, to help them serve you. That information may include your contact details and your messages with them. We don't sell it or use it for advertising.

If you have questions or requests about your information, please contact your agent first. You can also email privacy@meetsonny.com and we'll help your agent respond.

15. Your choices and rights

• Diagnostics: turn them on or off in Setup, or in Settings on your phone or Mac.
• Approvals: review and approve each message to your clients and contacts, and each email Sonny sends.
• Connected services: disconnect Gmail in Setup (§5). For other services, revoke Sonny's access in that service (for example, by deleting the API key you created for Sonny or changing your password), or email support@meetsonny.com for help.
• Access, correction, a copy, or deletion: email privacy@meetsonny.com.

  • We'll respond within 30 days.
  • We may need to confirm it's you first.
  • We honor these requests for every Sonny user, wherever you live.
• Leaving Sonny: you can stop using Sonny at any time. When your account ends, we:

  • turn off your access, AI service and diagnostics
  • disconnect Gmail, which revokes Google access, deletes your authorization and cancels any pending emails
  • remove the key your Mac uses to reach your backups

  Your encrypted backups are kept so you can come back, unless you ask us to delete them; when you ask, we delete them. Data on your Mac stays under your control, and we can help you remove Sonny and its data from your Mac. We keep a minimal record of what was turned off and when for 1 year (§12).

Sonny isn't meant for anyone under 18, and we don't knowingly collect information from children.

16. Security

We protect your information with measures that fit a product that runs on your own Mac. For example:

• your sign-ins for connected services stay on your Mac
• phone access requires sign-in
• backups and stored Google authorizations are encrypted
• we keep data only as long as described above

No system is perfectly secure. If something goes wrong that affects your information, we'll tell you. More: https://meetsonny.com/security.

17. Changes to this policy

We'll update this policy as Sonny changes. If we make a material change, we'll tell you in Sonny or by email before it takes effect, and we'll update the effective date above.

18. Contact

Privacy questions and requests: privacy@meetsonny.com
Everything else: support@meetsonny.com

Sonny is operated by Christian Daugherty.