Privacy Policy
Effective November 4, 2026
This policy explains what data the Sumetra app uses, why, who it is shared with, and how you can delete it.
Who is responsible for your data
Radomir Rebić, Bosnia and Herzegovina.
Contact: podrska@rasoapps.com
In short
- You can use the app without an account. Your financial data then stays only on your phone.
- If you create an account, your data is also stored on a server so you have a copy and can sync it.
- We don't sell your data or use it for advertising.
- You can delete your account and data in the app or through this page.
What data we use
Without an account
Accounts, transactions, budgets, goals, categories and settings are stored only on your phone and are not sent to us. If you delete the app, this data is deleted too, unless you made a backup first.
With an account
| Data | Why |
|---|---|
| Email address and password (stored in protected form) | Signing in, confirming your account and resetting your password |
| Your name, if you enter it, your chosen language and main currency | Account settings and email language |
| Accounts, opening balances, transactions, amounts, currencies, dates, notes, categories, budgets, goals and goal deposits | Backup and sync across your devices |
| Technical account data, such as modification times | Correct syncing |
Please don't enter sensitive information such as passwords or card numbers in notes. The app does not connect to your bank.
Error reports
When the app crashes or hits an error, a technical report may be sent: the error description, the place in the code, the app version, the phone model and the system version. Reports are used only to fix errors. The app doesn't add amounts or account names to them, and it removes email addresses from error descriptions before sending. It doesn't collect your IP address, screenshots or the sequence of your actions.
Exchange rates
Your phone periodically downloads exchange rates from ExchangeRate-API. No financial data is sent, but like any web service, it can see technical request data such as your IP address.
When you contact us
If you email us, we use your address and message to reply to you.
Permissions and what we don't do
The app doesn't ask for access to your location, contacts, camera or microphone. It has no ads and no analytics that track users. You choose and share any files for export or import yourself, through the system file picker.
Legal basis
We process account data to provide the service you asked for. We process error reports based on our legitimate interest in keeping the app working correctly and securely. We may also keep or disclose data when the law requires it.
Who else processes data
We use the following service providers, only as far as their work requires:
| Provider | Role |
|---|---|
| Supabase | Database and sign-in |
| Resend | Sending emails with codes |
| Sentry | Error reports |
| ExchangeRate-API | Exchange rates |
| Cloudflare and Google (Gmail) | This website and receiving support messages |
| Google Play | App distribution, under Google's own terms |
These providers may process data outside Bosnia and Herzegovina, including in the EU and the US. We disclose server data to others only when the law requires it.
How long we keep data
- Account data is kept while your account exists.
- Items you delete in the app may remain on the server marked as deleted, so the deletion can reach your other devices. They are permanently removed when you delete your account, or earlier on request.
- Deleting your account immediately removes the account and its data from the active database. Data may remain in a provider's backups, if any, for a limited time until they expire.
- Error reports are kept for up to 90 days.
- Support messages are kept as long as needed to handle your request.
- Provider logs, such as records of sent emails, are kept for a limited time under the providers' own rules.
Security
Data travels between the app and the server over an encrypted connection, and database rules allow access only to the data's owner. No system is completely secure, so please use a strong password. Data on your phone is as protected as the phone itself.
Your rights
You can ask for access to your data, correction, deletion, portability or restriction of processing, and you can object to processing. You can do most of this in the app: edit your data, export it, make a backup or delete your account. For anything else, write to podrska@rasoapps.com. You can also complain to the data protection authority in your country; in Bosnia and Herzegovina that is the Personal Data Protection Agency.
Children
The app is not intended for children under 16, and we don't knowingly collect their data. If you think a child has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy, for example if the app gets a new feature. The new version is published on this page with a new date. We will tell you about important changes in the app or by email.