Diagnostics and usage data
Last updated 22 October 2026 · version 2026-10-22
Preview draft, pending legal review. This notice describes diagnostics in the preview today. We will update it before anything here changes.
This notice is part of our Privacy Policy (https://sumone.app/legal/privacy) for the Sum∗ suite apps (the "Apps"), published by Janisis, Inc.
1. Off unless you turn it on
- Diagnostics are off by default.
- You turn them on in Settings, under Sum∗ diagnostics ("Share Performance and Diagnostics"). Some screens, such as Sync and an incomplete receipt, also offer a switch. Every switch controls the same single setting.
- One choice for the whole suite. The choice applies to every Sum∗ app on your device. If you are signed in, it is saved with your account and applies to all your signed-in devices.
2. What is sent
Each batch carries:
- About the install: a random install identifier made on your device, a session identifier, and the App, App version, platform, system version and language setting. It does not carry your account, your email, your name or a device model.
- Session timings: when a session starts and ends, and how long it lasted.
- Performance timings: how long a task took, labelled by a short name.
- Plan state: whether you are in the trial, on a paid plan, or read-only.
- Sync health: counts and timings that show how sync behaved, never your records.
- App health: counts of app health patterns.
- Voice: for each voice turn, which stage handled it, the kind of request and how long it took; and any rating you give.
- Receipt-read reports: how well a receipt was read, including short snippets of receipt text, such as an amount line, filtered to drop long numbers. Our server also drops snippets that contain spaces, slashes or "@". These reports are sent only if diagnostics are on.
If diagnostics are on and you use receipt forwarding, our servers also count the kinds of receipts you receive by sender domain, linked to your account, to improve receipt reading. These counts are deleted when you turn diagnostics off.
3. What is never sent
- Your amounts, payees or ledger content, other than the filtered receipt snippets above.
- Advertising identifiers.
- Tracking across other apps or websites.
We do not use diagnostics for advertising, and we do not sell them.
4. Where it goes
Diagnostics go to our own diagnostics service, run on Cloudflare. It does not store your IP address. We use diagnostics only to find problems and make the Apps faster and more reliable.
We do not copy diagnostics anywhere else. We will update this notice before that changes.
Our sign-in service has code to count sign-in events. It is switched off. We will update this notice before it is turned on.
5. How long we keep it
- Events: 180 days.
- Receipt-read reports: 90 days.
- The install record (install identifier and language): no automatic expiry yet.
- Your diagnostics choice: kept with your account until you delete it.
6. Turning it off and erasing it
- Turn off: switch off Sum∗ diagnostics in Settings. Sending stops straight away, and anything waiting to be sent is cleared. Receipt counts linked to your account are deleted.
- Erase: there is no erase button in the Apps yet. Email privacy@sumone.app and ask us to erase your diagnostics. Because diagnostics are not linked to your account, we may need your help to find your install, for example the App version and the dates you used it. If we cannot identify your data, it still ages out on the schedule above.