Effective 26 August 2026 · Last updated 26 August 2026
This policy explains how the OneSum application ("OneSum", "the app") and the website at onesum.app handle information. It applies to the iPhone, iPad and Mac versions of the app.
OneSum is developed and operated by an independent developer. For any privacy question, or to exercise any right described below, contact hello@onesum.app.
Because OneSum works entirely on your device, we do not collect:
We have no servers holding your portfolio. There is no database we could search for your data, and no export we could produce, because we never receive it.
Everything you enter — positions, transactions, dividends, cost basis, currency preferences, and settings — is written to storage on the device itself, inside the app's private container. It is protected by your device's own security, including the device passcode and, on supported hardware, hardware encryption.
If your device is backed up through iCloud Backup, iTunes, or Finder, that backup may include the app's data. Those backups are governed by Apple's privacy policy, not this one, and we have no access to them.
To display current prices, exchange rates, and dividend information, the app requests data from a third-party market data provider over an encrypted connection.
These requests contain only the identifiers needed to look up a price — for example a ticker symbol, an exchange code, or a currency pair. They do not include how many units you hold, what you paid, your portfolio total, or anything identifying you.
As with any internet request, the provider will receive your device's IP address and standard connection metadata. We do not control that provider's retention of connection logs, and their handling of that data is governed by their own privacy policy.
If you have enabled sharing of analytics and diagnostics in your device settings, Apple may provide us with aggregate, anonymised reports about crashes, performance, and general usage. These reports come from Apple already aggregated. They do not identify you, and we cannot connect them to an individual person or device.
You can turn this off at any time on iPhone and iPad under Settings › Privacy & Security › Analytics & Improvements, and on Mac under System Settings › Privacy & Security › Analytics & Improvements.
The onesum.app website is a static site. It sets no cookies, embeds no advertising or analytics trackers, and asks for no personal information. Our hosting provider processes standard server logs, including IP addresses, for security and to keep the site running.
When you write to hello@onesum.app we receive your email address and whatever you put in the message. We use it only to answer you, and we keep support correspondence no longer than needed to resolve the matter and understand recurring issues.
If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:
| Purpose | Legal basis |
|---|---|
| Fetching market data so the app can show prices | Performance of a contract (Art. 6(1)(b)) — it is the function you asked for |
| Responding to your support email | Legitimate interests (Art. 6(1)(f)) — answering the person who contacted us |
| Aggregate diagnostics from Apple | Your consent, given in your device settings (Art. 6(1)(a)) |
| Keeping the website secure | Legitimate interests (Art. 6(1)(f)) |
Under the GDPR, UK GDPR, and comparable laws you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability.
In practice these rights are largely self-service here: we hold no personal data about you. Your portfolio is on your device, so you can view, correct, export, or erase it directly in the app, and deleting the app removes it entirely. For anything held in support email, write to hello@onesum.app and we will act on your request within 30 days.
If you believe we have handled your data improperly, you may lodge a complaint with your national data protection authority.
Under the CCPA and CPRA you have the right to know what personal information is collected, to have it deleted, to correct it, and to opt out of its sale or sharing.
We do not sell or share your personal information, and we never have. We do not collect the categories of personal information that would make a "Do Not Sell or Share My Personal Information" link meaningful, and we do not use your data for cross-context behavioural advertising. Exercising any right under these laws will never result in discriminatory treatment.
OneSum is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable age), and we do not knowingly collect personal information from them. Since the app collects no personal information from anyone, there is nothing we would hold. If you believe a child has provided us personal information through support email, contact us and we will delete it.
Network requests from the app use TLS encryption. Your portfolio data is protected by your device's own encryption and passcode, which is why keeping a passcode enabled and your operating system up to date is the single most effective thing you can do to protect it.
No method of storage or transmission is perfectly secure. Because we hold none of your financial data on our side, a breach of ours could not expose your portfolio.
We do not transfer your personal data internationally, because we do not collect it. Market data requests and website traffic may be served by infrastructure in other countries, including the United States, under the providers' own safeguards.
If OneSum gains features that change how data is handled — cloud sync, accounts, brokerage connections, or paid subscriptions — this policy will be updated before that version ships, and the "last updated" date above will change. Material changes will also be noted in the app's release notes. Continuing to use the app after an update means you accept the revised policy.
Questions about this policy, or about privacy in OneSum generally:
hello@onesum.app