Privacy
Sumglass stores the least it needs to run a shared expense book. This page says what is kept, which services handle it, and for how long.
If you read a shared link
You have no account and we don't know who you are. Opening a link adds one to its view count, at most once a day. No IP address, device or location is stored for a view.
Your language choice is kept in a cookie on your device.
If you have an account
We store your email address, your display name and your language.
Each signed-in device has a session that records its IP address and browser, so a session can be recognised and ended.
The books you keep — entries, titles, amounts and the rates used — are stored so you and the people you share them with can read them. A record of who made or turned off share links and who archived or changed a project is kept for security.
Services that handle data
- CloudflareRuns the app and keeps its logs
- NeonStores the database, in Singapore
- ResendSends sign-in emails
- SentryReceives error reports, without links, emails or titles
- AnthropicReads the receipt and email text an owner or writer pastes, and translates the entry titles a reader asks to translate
- StripeTakes payments for readings as merchant of record; Sumglass never sees your card
How long things are kept
- Signed-in sessionsUntil you sign out, at most 1 year
- Sign-in request counts24 hours
- Security records2 years
- App logs7 days
- Error reports30 days
- Backups1 day
- Your booksUntil you ask us to delete them
Deleting your data
Email privacy@sumglass.com from the address on your account. We delete your account and its books within 30 days and confirm by email.
Backups and security records are not edited after the fact. They are removed when they reach the age listed above.
Last updated 2 November 2026.