Privacy policy

Last updated: 26 October 2026

Sumify is a web app for small shops to make GST bills and keep their stock and accounts. This page says, in plain words, what information Sumify keeps, why, who else takes part, and what you can ask of us. "We" and "us" mean Sumify; "you" means anyone who uses it.

What we keep

Only what you enter, and what the app needs to work:

  • Your mobile number, which is your sign-in. We send a one-time code to it by SMS each time you sign in; we keep only a fingerprint of the code, never the code itself.
  • Your shop's details: its name, address, phone, state, GSTIN, logo, the note at the foot of your bills, and the plan you are on.
  • Your books: bills, quotations, purchases, returns, payments, expenses, products and stock, product photos, and your customers and suppliers with the details you give for them (names, mobile numbers, addresses, GSTINs, balances).
  • Your employees' names and mobile numbers, and what each of them may do.
  • For a "Myself" profile: the money that comes in and goes out, and the people you lend to or borrow from.
  • Payments for a plan: the amount, how it was paid, its reference, and the GST invoice made for it.
  • A record of what our team did in your shop's account (for example a payment written down, or a sign-in to help you), with who did it and when.

What we use it for

To run the app for you: to sign you in, keep your books, make your bills and reports, and answer you when you ask for help. We do not sell your information, and we do not use your books for advertising.

Who else takes part

A few services do part of the work. Each gets only what that part needs:

  • Hosting: the app and its data are kept on Hostinger's servers, behind its content network.
  • SMS: your mobile number and the one-time code go to our SMS provider in India, to send the code.
  • Fonts: the pages load their fonts from Google Fonts, which sees your internet address as any website does.
  • Barcodes: when you scan a pack that your shop has no product for, only the barcode number is sent to open product catalogues (Open Food Facts and its sister catalogues, barcode-list.com and UPCitemdb) to find its name. Nothing about you or your shop goes with it.
  • Names shops give a pack: when you name a product that has a barcode, that name alone (never your shop, prices or stock) may be suggested to other Sumify shops that scan the same barcode.
  • WhatsApp: when you send a bill or a reminder, the app opens WhatsApp on your phone with the message ready; you send it yourself, under WhatsApp's own terms.
  • Paying online: where paying in the app is offered, the payment provider takes your card or UPI details; we only learn whether the payment went through.

What others can see

  • Your employees see as much of your shop as their role allows.
  • A bill's link opens that one bill, without signing in, for anyone who has the link, for 5 days. Send it only to the customer it is for.
  • Our support team can open your shop to help you or to keep the service working. Everything they enter is marked "Support", and each such sign-in is written in your shop's history. Otherwise our panel shows counts (how many bills, products and customers), not what they are.
  • If your shop joined with someone's referral code, its owner sees your shop's name and what your payments earned them.

On your device

One cookie keeps you signed in. The app also keeps a few choices on your device: your language, the look of the app, the shop you last worked in, and which lessons of the guide you have done. There are no advertising cookies.

How long we keep it

As long as your account is in use. When you ask us to delete a shop, its books, employees, photos and links are deleted; its plan payments and their invoices are kept, as the tax laws require. Copies we keep for safety (backups) may hold the data for a while after it is deleted.

Keeping it safe

Everything travels over HTTPS. There are no passwords to steal: you sign in with a one-time code, and we keep only fingerprints of codes and of bill links. Access to the servers is limited to our team. No system is perfectly safe; if something goes wrong that affects your information, we will tell you.

What you can ask of us

Under India's Digital Personal Data Protection Act, 2023, you can ask us to show you what we keep about you, to correct it, to delete it, or to take back a consent you gave, and you can bring a complaint to us. Ask, and we will give you all of a shop's data as one file.

Call or WhatsApp us on +91 90479 88898.

Children

Sumify is for running a business. It is not meant for anyone under 18.

Changes

When this policy changes, the new one is put here with its date. If a change matters, the app will also tell you.

Contact

Questions about this policy, or about your information? Call or WhatsApp us on +91 90479 88898.

This text is in English and in Tamil; where the two differ, the English text is the one that holds.