Privacy Policy
The short version. Without an account, your data never leaves your browser. With Pro, we store it on servers in the EU so your devices can sync. No ads, no tracking cookies, no analytics, and we never sell data. You can download or delete everything at any time.
1. Who is responsible
The controller of your personal data is [FULL LEGAL NAME], a sole proprietor (фізична особа-підприємець) registered in Ukraine under number [REGISTRATION NUMBER], [REGISTERED ADDRESS]. Contact: hello@oddsum.app.
2. Using Oddsum without an account
Everything you enter — amounts, labels, dates, hours, subscriptions, jobs, loans, savings and settings — is stored in your browser's local storage on your device. It is not sent to us. We cannot see it, and we cannot recover it if it is deleted.
Like any website, our server receives technical information when your browser loads a page: your IP address, the page requested, the time, and your browser's user-agent string. We keep request logs for no more than 14 days, only to keep the service secure and working, then delete them.
3. With an account (trial, Pro or Lifetime)
| What | Why |
|---|---|
| Email address, and a securely hashed password (never the password itself) | To sign you in, confirm your address and reset your password |
| Display name (optional) | Shown in the app |
| Your entries, subscriptions, jobs, loans, savings and settings | To sync them between your devices and keep a cloud copy |
| Time zone | To send the weekly summary at the right time |
| Plan status: trial or Pro end date, Lifetime, Paddle customer and subscription IDs | To know which features you have paid for |
The legal basis is the contract between us — we need this data to provide the account and features you asked for (GDPR Art. 6(1)(b)). Server logs are kept on the basis of our legitimate interest in running a secure service (Art. 6(1)(f)).
4. Payments
Purchases are processed by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment details, billing address and tax information directly and handles them under its own privacy notice. We never receive your card number. Paddle tells us your email, country, what you bought, and whether a subscription is active, cancelled or refunded.
5. Emails
We send emails that are part of the service: confirming your address, password resets, trial reminders, receipts-related notices and warnings before data deletion. With Pro, we also send a weekly summary; every one has a link to turn it off. We do not send marketing emails unless you opt in.
6. Who processes data for us
We use a small number of service providers, each only for the purpose listed:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Servers and backups | EU (Germany / Finland) |
| Paddle.com Market Ltd | Payments, tax, invoicing (as Merchant of Record) | UK, with EU/US processing |
| [EMAIL PROVIDER] | Sending account and summary emails | [LOCATION] |
| Google [only if “Sign in with Google” is offered] | Sign-in, only if you choose it | US / global |
Where a provider processes data outside the EU or Ukraine, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
7. How long we keep data
- While you have Pro, a trial or Lifetime: for as long as your account exists.
- After Pro or a trial ends: your cloud copy is kept for 12 months so you can come back or download it, then deleted. We email you 30 days before.
- When you delete your account: your data is deleted from our live systems immediately and from backups within 30 days.
- Server logs: 14 days.
- Payment records: kept by Paddle as the law requires.
8. Your rights
You can:
- Get a copy of your data — Download backup on the Account page gives you everything, any time.
- Correct it — edit or delete any entry in the app.
- Delete it — Delete account on the Account page, or Delete all data for data kept only in your browser.
- Object to or ask us to restrict processing, and ask questions about any of this — write to hello@oddsum.app. We answer within 30 days.
- Complain to a data protection authority — in the EU, the authority in your country; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.
9. Cookies and tracking
Oddsum uses no advertising, no analytics and no tracking cookies. Fonts are served from our own server, not from third parties. When you sign in, a sign-in token is kept in your browser's storage; it is strictly necessary for the account to work.
10. Security
All traffic is encrypted (HTTPS). Passwords are stored only as secure hashes. Each account can read only its own data, enforced on the server. Backups are kept in the EU, and only we can access them.
11. Children
Oddsum is not intended for children under 16, and we do not knowingly collect their data.
12. Changes
If we change this policy in a way that matters, we will email account holders before the change takes effect and update the date at the top.
13. Contact
Privacy questions or requests: hello@oddsum.app.