Privacy

Responsible

René Winkler
E-mail: contact@sommiva.com

What data

When you create or join a collection, Sommiva stores in the cloud:

• Display name: the name you enter. A nickname is enough.
• Amounts and notes: what you record, with time and area. Please do not write names or addresses of other people in notes.
• Collection and areas: name, currency, goal, end date and visibility of the collection, its areas (e.g. "Bar" or "Group North") and who is a lead or a member.
• Change log: corrections and deletions of entries, with time and who made them.
• Anonymous user ID: a random identifier so that your entries are assigned to you. It contains no name and no contact details.

Your settings (e.g. language, appearance, number format) and your suggested display name stay on your device only.

Purpose and legal basis

We process this data only so that you can record amounts together and see the total. The legal basis is providing the app you want to use (Art. 6(1)(b) GDPR; in Switzerland the Federal Act on Data Protection). We do not analyse, sell or use the data for advertising.

Where the data is stored

Sommiva uses Google Firebase (Cloud Firestore and anonymous sign-in) by Google Ireland Limited and Google LLC. The data of collections is stored in the Zurich region (europe-west6). For anonymous sign-in, Google may process technical data such as the anonymous user ID and the IP address outside Switzerland and the EU as well, in particular in the USA; Google relies on the Standard Contractual Clauses of the European Commission for this. Google processes the data as a processor under the Firebase data processing terms.

Who sees your data

Only the members of the same collection. The lead decides what members see: everything, only the total, or only their own amounts. The lead always sees everything. We do not pass any data on to third parties.

How long

A collection closes automatically after 30 days without a new entry, or when the lead closes it. Closed collections are deleted with all entries 24 months after closing; the app reminds you beforehand. The lead can delete a collection at any time before that.

Your rights

You can request access to your data, have it corrected or deleted, and object to its processing. In the app, you can delete directly under Settings › "Delete my data": your name becomes "Deleted member" in all collections and your notes are deleted. Your amounts remain so that the collection's total stays correct.

If the lead removes you from a collection, your entries remain visible with your name and the note "removed", so that the accounts stay traceable.

For anything else, write to contact@sommiva.com. You can also lodge a complaint with a data protection supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

Purchases

You buy Sommiva Pro through Google Play or the App Store. The store handles the payment; we receive no payment data. The app only asks the store whether Pro was bought.

This website

The website sommiva.com sets no cookies, uses no tracking and loads nothing from other servers. It is served by GitHub Pages (GitHub Inc., USA). When a page is requested, GitHub processes technically necessary data such as the IP address to deliver the page and protect it against attacks. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR).

Changes

If the app changes so that other data is processed, we update this policy and the date above.