Privacy policy

Last updated 13 November 2026

Sumjar is a shared money book for households. This page explains what we store about you, why, who helps us run the service, and what you can do about it. We have tried to keep it short and plain.

Who we are

Sumjar is run by Step Up Digital Ltd, registered in England and Wales, company number 13825008, 15 Summerlands Grove, Bradford, BD5 8QU, United Kingdom. For anything about your data, email hello@sumjar.app. We are the controller of the personal data described here.

What we store

Your account: your email address, the name you give us, and your password (stored only in a scrambled form we cannot read).
Your books: book names and currencies, and each entry’s amount, date, remark, category, payment method, and who added it.
Sharing: who is in each book and their role, and the invite links you create.
Technical records: our hosting and database providers keep short-lived logs of requests, such as IP address, browser type and time, to keep the service working and secure.

Sumjar never asks for, stores or connects to bank accounts or payment cards. It only records the numbers you type in.

Why we use it

To provide Sumjar to you: your account, your books, sharing, reports, and the emails needed to log in or reset a password. This is necessary to perform our agreement with you.
To keep Sumjar secure and fix problems. This is in our legitimate interest in running a safe, working service.

We do not sell your data, show adverts, or use your entries for marketing.

Who can see your books

Only the people in a book can see it. Everyone in a shared book sees its entries and the names of the other members. The book’s owner decides who joins and can remove people.

Services that help us run Sumjar

Supabase stores the database and handles logins. Your data is kept in eu-north-1.
Netlify hosts the website and runs the pages you visit.
Resend sends account emails, such as sign-up confirmations and password resets, from servers in Ireland.

These companies process data only on our instructions. Some of them, or their own suppliers, are based in the United States. Where data leaves the UK or European Economic Area, they rely on recognised safeguards such as standard contractual clauses.

Cookies

Sumjar uses only the cookies needed to keep you logged in. There are no advertising, analytics or tracking cookies, so we do not ask for cookie consent. Your browser may also remember your last-used category on this device to speed up adding entries.

How long we keep it

We keep your data while you have an account. You can delete your account at any time from the Account page. When you do, we delete your login, your name, and every book only you used. Entries you added to a book other people still use stay in that book, shown as added by “A former member”, because they are part of that household’s record. Copies in our providers’ backups are removed as those backups expire.

Your rights

You can ask us to:

give you a copy of your data (you can also download any book as Excel from its Reports page);
correct anything that is wrong;
delete your data (or do it yourself from the Account page);
restrict or object to how we use it.

Email hello@sumjar.app and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

Children

Sumjar is not meant for anyone under 16.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell account holders by email before the change takes effect.