Last updated: February, 2025

summie B.V. (hereinafter referred to as 'summie', 'we', 'our') respects your privacy and ensures that your personal data is processed securely. This privacy policy explains how we collect, use, store, and protect your personal data when you use our services, both via our website summie.co and our app. This policy is drafted in accordance with the General Data Protection Regulation (GDPR) and other relevant legislation.

What data do we collect?

We collect various types of personal data from users who use our website and/or app:

• Registration and authentication data:
  • Name
  • Email address
  • Unique user ID
  • Encrypted password (for manual registration)
• Payment information:
  • Bank account details, such as IBAN and transaction information, collected via our payment provider GoCardless.
• Technical data:
  • Information about your use of our app, such as device information, location (if allowed), and other log data collected through cookies and similar technologies.
• Data analytics:
  • Anonymized user interactions with the app, including scrolls and clicks.
• Advertising and conversion tracking data:
  • Data collected via the Facebook SDK, like conversion events.

Why do we collect this data?

We use your data for the following purposes:

• To create a user account and provide access to our services.
• To process subscriptions via RevenueCat.
• To handle transactions and bank account data via GoCardless.
• To improve the user experience by analyzing usage patterns and preferences.
• To track and measure the effectiveness of advertising campaigns on Instagram.
• To comply with legal obligations and ensure the security of our systems.

How do we collect data?

We collect data in various ways, depending on your interaction with our services:

• When you create an account or log in via Apple or Google.
• When you connect your bank via GoCardless.
• Automatically collecting technical data via Google Firebase about your use of the app.
• Anonymized user interactions about app usage with Microsoft Clarity.
• We collect and use the Identifier for Advertisers (IDFA) from your device to track and measure advertising effectiveness for campaigns conducted on platforms such as Instagram. This data is shared with Facebook for attribution and conversion tracking purposes.

Do we share your data with third parties?

Yes, we share your personal data with third parties, but only when necessary to provide our services:

• GoCardless: For processing transactions and bank details.
• Google Firebase: For hosting, storage, and database management of your data.
• Apple and Google (OAuth): For authentication via 'Sign in with Apple' and 'Sign in with Google'.
• Apple and RevenueCat: For subscription and payments.
• Microsoft Clarity: For app usage and investigation of issues.
• Facebook: For tracking advertising effectiveness and measuring conversions on platforms like Instagram.
• VisionParser: For extracting data from receipts and invoices.
• External development teams: For maintenance and app improvements.

Your rights

As a user of our services, you have several rights regarding your personal data:

• You have the right to access the data we process about you.
• You can request corrections to inaccurate or incomplete data.
• You can request the deletion of your personal data (unless we are legally required to retain it).
• You can request a temporary restriction on the processing of your data.
• You can withdraw your consent for data processing (if the processing is based on consent).

Securing your data

We take the protection of your personal data seriously and have implemented appropriate technical and organizational measures to secure your data against loss, misuse, and unauthorized access:

• All data transmitted through our platforms is encrypted with SSL/TLS.
• Data stored via Google Firebase is encrypted with AES-256.
• Only authorized personnel have access to personal data, secured with two-factor authentication (2FA).

Contact

If you have any questions about this privacy policy or wish to exercise your rights, you can contact us at hello@summie.co