Legal

Deleting and exporting your data

Last updated 22 October 2026 · version 2026-10-22

Preview draft, pending legal review. This notice describes what you can do today in the preview.

This notice is part of our Privacy Policy (https://sumone.app/legal/privacy) for the Sum∗ suite apps (the "Apps"), published by Janisis, Inc.

1. Exporting your records

Export works in read-only mode too. Exports are made on your device.

iPhone and iPad

• Settings, Export: your transactions as CSV, OFX or PDF, or a ZIP of the PDF with attachments.
• Devices, encrypted backup (.sum): a sealed backup of your ledger. It opens with a file password you choose or with your Emergency Kit words. The App can check that a.sum file opens. Restoring your ledger from it is not yet available, so keep a CSV or OFX export too.

Mac

A full export from the Mac App is coming, but it is not available yet. Today the Mac App can export a pivot table as CSV. Meanwhile, to get a full copy of your records:

• If you also use an iPhone or iPad on the same account with sync on, let it catch up, then export from it as above.
• If you use only the Mac, email support@sumone.app and we will help you get a copy out of your Mac. We cannot read your ledger ourselves, so this means guiding you through it, not sending you your data.

2. Deleting your account

You can delete your SumOne account from inside the Apps, on iPhone, iPad and Mac.

Step 1: Export

Export anything you want to keep (section 1). After deletion we cannot give you any of it back.

Step 2: Delete in the App

• Where: Settings, Account, "Delete account".
• What you see first: what we delete on our servers, what is kept and why, and what stays on your device (section 3).
• Confirm: type DELETE, then enter the 6-digit code we email to the address you sign in with. The code confirms it is you, right before anything is deleted.
• What happens next: we end our access at your connected providers, delete what we hold, and sign you out on that device. Your other devices stop syncing and ask you to sign in.
• If something cannot finish: for example, if a provider does not answer, nothing is deleted yet and the App asks you to try again. If it keeps failing, email privacy@sumone.app from the address you sign in with and we will delete your account by request, within 30 days.

Your connections

Before deleting, we tell Plaid, Basiq and your mail provider to end our access. Revolut Business does not let us end access remotely, so also remove the SumMoney certificate in your Revolut Business settings. Transactions already imported stay in your ledger.

What we delete

• your account record (we keep only a marker that an account was deleted, without your email);
• your email link, sign-in and session records, and security counters keyed to your email;
• encrypted sync copies, snapshots, and the device and member logs for your own ledgers;
• stored connection access for Plaid, Basiq, Revolut and your connected mailboxes, including the Revolut key, and the connection event log;
• your receipt forwarding address, approved senders, held receipts and their summaries;
• Outlook add-in items;
• your diagnostics choice, and receipt counts linked to your account; and
• your monthly voice usage counts.

Sign-in session records created before {ACCTDEL_RELEASE_DATE} cannot all be found by account. They stop working the moment your account is deleted and are removed automatically when they expire, within 30 days.

What is kept, and why

• The record of the terms you accepted. It is our evidence of our agreement. See Privacy Policy section 9.
• Data held by providers you connected. For example, Plaid keeps data under its own policy. Deleting your account ends our access, as described above.
• Contributions sent to you that you have not collected. They are encrypted to your key and expire after 90 days.
• Diagnostics. These are tied to a random install identifier, not your account. They age out on the schedule in the Diagnostics notice. See that notice to ask for them to be erased sooner.
• Our shared business lookup cache. It holds lookup results and the bank descriptions they were made for. It is not linked to your account.
• Short operational logs and daily counts. These do not contain your records.
• Ledgers you shared with others. The encrypted shared copy stays for the people you shared with. They keep what is on their devices and any exports they made.

Subscriptions

Deleting your account does not cancel a subscription bought through the App Store. Cancel it in your Apple account settings.

Signing up again

After deletion, if you sign up with the same email, you start a new, empty account.

3. What happens on your devices

• Deleting your account does not delete the records on your devices. They are yours and stay until you delete them or remove the App.
• To remove this device's data when you delete your account: turn on "Also delete this device's data" in the Delete account screen. It removes that device's ledger, local snapshots, Recently Deleted items, receipts and settings the next time the App opens. Other devices and your exports are not affected.
• To remove everything from a device at any time: delete the App. This also removes its local snapshots and Recently Deleted items.
• Device backups: your device's own backups, such as iCloud Backup, may still hold App data until those backups are replaced.
• Receipt files: if you chose a folder for receipt files, such as a cloud drive, delete them there.
• Shared ledgers: people you shared with keep what is on their devices and any exports they made.
• Location history: to clear your visit history, go to Settings and erase it.