Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains what data Cumulo (“the app”, “we”) collects, why, and your rights over it. Cumulo is a personal cashflow app available on the web, iOS and Android. We built it to be private by default: no ads, no trackers, and we never sell your data.

1. Who is responsible

Cumulo is operated by supervibe (VAT ID: PL6472381490), the data controller. For any privacy question or request, contact us at contact@supervibe.pl.

2. What we collect

• Account information — when you sign in with Google or Apple, we receive your name, email address and a profile identifier (and, on Apple, optionally a private relay email). This is handled through Firebase Authentication.
• Your financial entries — the data you enter in the app: transactions, recurring items, amounts, dates, labels, icons, your chosen currency, starting balance and display name.
• Preferences — language, theme and accent color, stored to remember your settings.

We do not use advertising or analytics SDKs, and we do not track you across other apps or websites. We do not access your bank accounts.

3. How we use your data

• To provide the core service: store your entries, sync them across your devices, and calculate your balance and forecast.
• To authenticate you and keep your account secure.
• To remember your preferences (language, theme, currency).

4. Where your data is stored (processors)

Your account and entries are stored using Google Firebase (Firebase Authentication and Cloud Firestore), operated by Google. Sign-in is provided by Google and Apple. These providers process data on our behalf as part of delivering the service. Data may be processed on Google’s servers, which can be located outside your country.

5. Sharing

We do not sell or rent your personal data. We share it only with the infrastructure providers listed above, strictly to operate the app, or where required by law.

6. Retention & deletion

We keep your data for as long as your account exists. You can delete your account at any time in the app (Settings → Delete account), which removes your entries and your authentication account. You can also request deletion by emailing us.

7. Your rights

Subject to applicable law (including the EU/UK GDPR), you have the right to access, correct, delete, export, restrict or object to the processing of your personal data, and to withdraw consent. To exercise any of these, use the in-app controls or contact us. You may also lodge a complaint with your local data protection authority (in Poland: UODO).

8. Security

Access to your data is restricted to your authenticated account. We rely on Google Firebase’s security and our access rules so that each user can read and write only their own data. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. Children

Cumulo is not directed to children under 16, and we do not knowingly collect data from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by an in-app notice.

11. Contact

Questions or requests: contact@supervibe.pl.