Privacy Policy
Sumly is a money ledger provided by Rooche to organizations. Your organization invites you to Sumly and controls the workspace your data lives in. This policy explains what Sumly itself collects and how it is handled.
This page is the Sumly privacy supplement. It describes what Sumly itself stores. The Rooche Platform Privacy Policy governs everything it does not cover — accounts and sign-in, billing, support, retention, and your rights under the Data Privacy Act of 2012 (RA 10173).
What we collect
- Account information from your organization. When you sign in, your organization's own account system verifies your credentials and tells Sumly your username, display name, role, and language preference. Sumly never stores your password.
- The ledger records you enter. Amounts, categories, business, optional sub-category and note, the date, and which account recorded the entry.
- Support conversations. If you contact us from inside the app: your message, any photos or PDF files you choose to attach, and basic context (which app, which version) so we can help.
Sumly has no advertising and does not collect your location, contacts, or anything from your device beyond what is listed above. With your consent, Sumly collects privacy-safe usage analytics — coarse, screen-level events (which screens are used, and whether a request succeeded) to help us improve the app. These carry no personal or financial data and nothing you enter: no names, amounts, ledger records, or identifiers. Analytics is off until you opt in (Settings → Privacy) and you can turn it off again at any time. This analytics is processed on our behalf by Google Analytics (GA4); the legal basis is your consent, and withdrawing it stops collection.
How it is used
- To provide the ledger to your organization — showing each member exactly what their role allows (organization administrators see the organization's records; members see their own).
- To respond when you ask for help.
Where it lives
Each organization's data is kept in that organization's own isolated backend, hosted on our infrastructure. Support attachments are stored by our platform so the conversation works in both directions. Data is encrypted in transit (TLS). The mobile apps also keep a copy of your organization's ledger on your device so it works offline; entries recorded offline are stored on the device until they sync.
Sharing and children
Both are platform-wide: see the Rooche Platform Privacy Policy — we do not sell your data, and Sumly is not directed at children. Within your organization, your ledger entries are visible to its administrators — that is what the product is for.
Retention
Ledger data is kept for as long as your organization uses Sumly. Records can be edited or deleted in the app by the people your organization's role rules allow. If your organization leaves Sumly, or you want something removed that you cannot remove yourself, contact us and we will handle it.
Changes
If this policy changes, the current version will always be at this address, with its effective date above.
Contact
Reach us any time from the app's Get help screen.
Platform policy: rooche.biz/privacy · Terms: rooche.biz/terms