Privacy Policy

---

Effective Date: May 13, 2026

This Privacy Policy describes how Sum of Technologies ("Sum of Technologies," "we," "us," or "our") collects, uses, and shares information when you use any of our mobile applications, web applications, websites, or related products (collectively, the "Services").

Sum of Technologies operates as an umbrella entity for a portfolio of consumer applications. This single Privacy Policy applies uniformly to all Services we offer, unless a specific application provides a supplemental notice covering practices unique to that application. Where this Policy refers to "the Services" or "our applications," the reference applies to whichever Service you are using.

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, such as:

• Account information: name, email address, username, password, profile picture, and any other details you choose to add to your profile.

• User content: any content you create, upload, or share through the Services (e.g., drawings, text, images, files).

• Communications: messages you send to us, including support requests and feedback.

• Payment information: when you make a purchase, payment is processed by our payment providers (e.g., Apple App Store, Google Play, Stripe). We do not store full payment card numbers ourselves.

1.2 Information Collected Automatically

When you use the Services, we automatically collect:

• Device information: device model, operating system and version, unique device identifiers (e.g., IDFA, GAID, where permitted), language, timezone, and mobile network information.

• Usage information: features used, screens viewed, actions taken, session duration, crash logs, and performance data.

• Approximate location: derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission.

• Cookies and similar technologies: on our websites, we use cookies and similar technologies for analytics and functionality.

1.3 Information from Third Parties

If you sign in via a third-party service (e.g., Apple, Google, Facebook), we receive information from that service according to your privacy settings on it, typically including your name, email address, and a unique identifier.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services;

• Authenticate users and secure accounts;

• Process transactions and manage subscriptions;

• Personalize content and recommendations;

• Communicate with you about updates, support requests, and (with your consent where required) marketing;

• Measure and analyze usage to improve the Services;

• Detect, investigate, and prevent fraud, abuse, and security incidents;

• Comply with legal obligations and enforce our Terms of Service.

Legal Bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract: to provide the Services you request.

• Legitimate interests: to improve, secure, and promote the Services, where these interests are not overridden by your rights.

• Consent: for optional features such as marketing communications, certain advertising tracking, and any processing where consent is legally required.

• Legal obligation: to comply with applicable law.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. How We Share Information

We do not sell your personal information in the traditional sense. We share information only as described below:

• Service providers: vendors that help us operate the Services (hosting, analytics, customer support, payment processing, attribution, advertising, crash reporting). These providers are bound by confidentiality and data protection obligations.

• Advertising partners: where a Service shows ads, we may share limited information (such as advertising identifiers, where permitted) with ad networks. See Section 4.

• Affiliated entities: we may share information with companies under common control or ownership with Sum of Technologies, subject to this Policy.

• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred, subject to this Policy.

• Legal and safety: where required by law, legal process, or to protect the rights, property, or safety of users, the public, or Sum of Technologies.

• With your consent: in any other case where you direct us to share information.

4. Third-Party Services and SDKs

The Services use third-party tools that may collect information about you. Each of these has its own privacy policy.

Depending on which Service you use, the third parties involved may include:

• Apple App Store / Google Play – distribution and in-app purchases

• Firebase / Google Analytics for Firebase – analytics and crash reporting

• Sentry / Crashlytics – crash and error reporting

• AppsFlyer / Adjust / Branch – install attribution and marketing analytics

• AdMob / AppLovin / Unity Ads / Meta Audience Network – advertising (only in Services that display ads)

• Adapty / RevenueCat – subscription management

• Amplitude / Mixpanel – product analytics

• Cloudflare / AWS / Google Cloud / Microsoft Azure – hosting and content delivery

A current list of third-party SDKs used in any specific Service is available on request.

Apple App Tracking Transparency (ATT)

On iOS, certain advertising or attribution features require permission to access the device's IDFA. We will only access the IDFA if you grant permission via the ATT prompt. You can change this at any time in your device Settings.

5. Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal information.

5.1 General Rights

• Access: request a copy of the personal information we hold about you.

• Correction: request that we correct inaccurate or incomplete information.

• Deletion: request that we delete your personal information.

• Restriction / Objection: request that we restrict or object to certain processing.

• Portability: receive your information in a portable format.

• Withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise these rights, contact us at support@sumoftech.com. We may need to verify your identity before responding.

5.2 DIFC and the UAE

Sum of Technologies is established in the Dubai International Financial Centre ("DIFC") and is subject to the DIFC Data Protection Law No. 5 of 2020, administered by the DIFC Commissioner of Data Protection.

If you are a Data Subject under DIFC Data Protection Law, you have rights including:

• The right to access your personal data and obtain information about its processing;

• The right to rectification of inaccurate personal data;

• The right to erasure ("right to be forgotten") in certain circumstances;

• The right to restrict or object to processing;

• The right to data portability;

• The right not to be subject to decisions based solely on automated processing producing legal or similarly significant effects;

• The right to lodge a complaint with the DIFC Commissioner of Data Protection (https://www.difc.com/business/operating/data-protection).

If you are a resident of the UAE outside the DIFC and ADGM free zones, you may have analogous rights under UAE Federal Decree-Law No. 45 of 2021 (the UAE PDPL), administered by the UAE Data Office, to the extent it applies to processing of your data.

5.3 European Economic Area, UK, and Switzerland (GDPR / UK GDPR)

You have the rights listed in Section 5.1. You also have the right to lodge a complaint with your local data protection authority.

5.4 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and "share" (as defined under the CCPA);

• Request deletion or correction of your personal information;

• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising;

• Limit the use of sensitive personal information;

• Not be discriminated against for exercising your rights.

To submit a request, email support@sumoftech.com. You may also use an authorized agent.

We do not sell personal information for money. To the extent advertising identifiers shared with ad networks qualify as a "sale" or "share" under California law, you may opt out by adjusting in-app settings, declining the ATT prompt on iOS, or opting out of personalized ads on Android.

5.5 Other Jurisdictions

If you are located in a jurisdiction with its own data protection laws (e.g., Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, Saudi Arabia's PDPL, Türkiye's KVKK), you may have similar rights. Contact us to exercise them.

5.6 Marketing Communications

You can opt out of marketing emails at any time using the unsubscribe link in any such email, or by contacting us. Transactional and service-related messages will still be sent.

6. Data Retention

We retain personal information for as long as needed to provide the Services and for the purposes described in this Policy. When information is no longer needed, we delete or anonymize it, unless we are required to retain it longer for legal, tax, accounting, or security reasons.

Typical retention periods:

• Account information: for the life of the account, plus up to twelve (12) months after deletion, after which it is deleted or anonymized.

• Usage and analytics data: typically up to twenty-four (24) months in identifiable form.

• Crash logs and diagnostic data: typically up to ninety (90) days.

• Backups: retained on a rolling basis (typically 30–90 days) and deleted in line with our backup schedule.

• Transaction records: retained as required by applicable tax and accounting law.

7. International Data Transfers

Sum of Technologies operates internationally. Your information may be transferred to, processed in, and stored in countries other than the one in which you reside, including the DIFC, the United Arab Emirates, the European Union, the United States, and other locations where our service providers operate.

Where required by law, we use appropriate safeguards for cross-border transfers, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, transfer mechanisms recognized under the DIFC Data Protection Law, or equivalent mechanisms.

8. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit (TLS), restricted access controls, and monitoring. No system is completely secure, however, and we cannot guarantee the absolute security of your information.

If you believe your account or information has been compromised, please contact us immediately at support@sumoftech.com.

9. Children's Privacy

The Services are not directed to children under 13 (or under 16 in jurisdictions, such as parts of the EEA, where that is the minimum age for consent to information society services). We do not knowingly collect personal information from children below the applicable age without verifiable parental consent. If we learn that we have collected such information, we will delete it. Parents or guardians who believe their child has provided personal information to us should contact support@sumoftech.com.

10. Third-Party Links

The Services may contain links to third-party websites or services. This Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services, by email, or by other reasonable means before the changes take effect. The "Last Updated" date at the top reflects the most recent revision. Your continued use of the Services after changes take effect constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Sum of Technologies Dubai International Financial Centre Unit IH-00-VZ-01-FL-228, 

Level 1 Innovation Hub, Virtual Inventory Dubai, United Arab Emirates

Website: https://sumoftech.com 

General contact: support@sumoftech.com

Legal & Privacy Contact

Daniel Carter Legal Counsel, Sum of Technologies legal@sumoftech.com