Sumline
Last updated 2 September 2026
Sumline collects no data. There is no server to send it to.
Nothing.
There is no account system, no login and no registration. No identifier of any kind is generated for you or transmitted anywhere unless you make a purchase, which is covered under Network access below. We never learn your identity.
Everything you write. Your notes are stored as a single document in the app's private storage, encrypted with AES-256-GCM. The key is generated on your device the first time you open the app and is held in the iOS Keychain or the Android Keystore. A fresh random nonce is used for every write.
That document never leaves your device. Deleting the app deletes both it and the key, and we cannot recover either, because we never had them.
None of them. There is no analytics SDK, no crash reporter, no attribution framework, and no advertising library in this app. We have not integrated one and do not intend to.
The app requests no permissions at all. It does not ask for your location, camera, microphone, contacts, photos or notifications, and it has no reason to.
Sumline makes network requests in two situations only, and both happen because you asked for something.
When you tap Refresh rates now in Settings, the app requests current currency exchange rates from a third-party rate service. That request carries no account identifier, no device identifier and none of your data — it asks only for a table of exchange rates. Your IP address is visible to that service, as it is for any internet request.
A rate table ships inside the app, so it works fully offline and you never have to make this request at all. Sumline tells you plainly how old its rates are.
The second is the in-app purchase. Payment itself is handled entirely by Apple's App Store or Google Play — Sumline never sees a card number and never handles money.
When you buy the unlock, or tap Restore purchase, the app also contacts RevenueCat, a service that checks your store receipt and remembers that this device has paid. It receives the receipt and an anonymous identifier that RevenueCat generates for the app. It does not receive your name, your email address, your device's identifier, or anything you have written in the app. It is used for the purchase and for nothing else — there is no analytics, no profiling and no advertising attached to it.
If you never buy the unlock, this request never happens.
Sumline collects nothing from anyone, including children. It contains no advertising, no in-app browsing and no communication between users.
Regulations such as the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data a company holds about you. We hold none, so there is nothing for us to disclose, correct, delete or export. Your data is already entirely in your possession: it is on your phone.
If you want to erase it, delete individual notes in the app or delete the app.
If this policy ever changes, the updated version will be published here with a new date. A change that introduced any data collection would be a change to what this app fundamentally is, and would be announced plainly rather than buried.