Privacy Policy

Overview

SuMal is designed around a simple principle: your financial data is yours. There are no developer-run servers storing your transactions, no accounts you sign up for with us, and no third-party cloud holding your records. The app runs entirely on your device, and anything you sync lives inside your own Google Drive.

Information We Handle

• What you enter in the app — transactions, categories, budgets and settings. These are stored locally on your device and, only if you choose to sync, inside a private folder in your own Google Drive.
• Google account profile — when you sign in with Google (for optional Drive sync), we receive your name, email address and profile picture from Google. This is used only to identify your Drive account and is stored on your device.
• Basic web performance data — the web version of SuMal is hosted on Vercel and uses Vercel Speed Insights, which collects basic, anonymous performance metrics (such as page load speed) to help us keep the app fast. It does not read your financial data.

Where Your Data Lives

Your entries are kept in your browser's local storage or in the app's local storage on Android. If you enable sync, backups are written to a folder named SuMal - MoneyManager that the app creates in your personal Google Drive. When you set a backup password, backups are encrypted (AES-256-GCM with a PBKDF2-derived key) before they leave your device, so even Google cannot read them.

Google Sign-In and Drive Access

Sign-in is handled by Google Identity Services. SuMal requests only the minimal permissions it needs — your profile (name, email, picture) and drive.file, which lets the app see and edit only the files it creates in your Drive. The app cannot read or modify any other file you own.

Google's own privacy and terms apply to your Google account. See Google's Privacy Policy.

Sharing and Disclosure

• We do not sell your personal information.
• We do not share your data with third parties.
• We do not read, mine, or analyse your financial records.
• We operate no servers that receive or store your app data.

Security

• Optional end-to-end encryption for backups (AES-256-GCM + PBKDF2-SHA256).
• Minimal Google Drive scope (drive.file); the app can only touch files it created.
• No developer-side storage or databases.
• You control your data and can delete it at any time by clearing the app data and removing the folder from your Drive.

Children

SuMal is not intended for children under 13, and we do not knowingly collect data from children. If you believe a child has provided us with information through Google sign-in, contact us and we will help you remove it.

Changes to This Policy

We may update this policy from time to time. Changes take effect when posted on this page, and the "Last updated" date above is revised accordingly.

Contact

Questions about this policy? Email info@syscloudmyanmar.com or use the Contact page.