Privacy Policy — TrueSummit
TrueSummit TrueSummit

The Fine Print, Plainly

Privacy Policy

Last updated: October 1, 2026

TrueSummit is a personal budgeting and net-worth app operated by Summit Collective LLC, a Utah limited liability company (“Summit Collective,” “we,” “us”). This policy explains what data the app handles, how it’s used, and the choices you have. TrueSummit is built so your financial data stays as private as possible.

Information we collect

  • Account information. When you create an account, we collect your email address to authenticate you and sync your data across your devices. If you use Sign in with Apple, we receive the email address Apple provides, which may be a private relay address. If you use Sign in with Google (available on Android), we receive the email address associated with your Google account.
  • Financial information you add or connect. Transactions, balances, budgets, goals, categories, and net-worth figures. If you link a bank through Plaid, we receive account and transaction data from your financial institutions. On Apple devices, if you grant permission, TrueSummit reads Apple Card, Apple Cash, and Savings activity through Apple’s FinanceKit.
  • Content you create. Notes, memos, tags, and — if you use receipt scanning — photos of receipts. Receipt images are processed and stored on your device.
  • Identifiers. An account identifier used to associate your synced data with you.

We do not collect your bank login credentials — those are handled directly between you, Plaid, and your bank, and never reach TrueSummit’s servers. When the app fetches bank data, our server relays it from Plaid to your device without keeping a copy, and the key that lets the app reach your bank connection is kept in your device’s Keychain. We also keep an encrypted copy of that key on our server, used only to disconnect your bank at Plaid if you delete your account or stop using TrueSummit (see Data retention). It is never used to fetch your data, and the key needed to decrypt it is not stored in our database. If cloud sync is on, the resulting transactions and balances are then synced like the rest of your data.

Apple Card, Apple Cash, and Savings data read through FinanceKit is never uploaded. It stays on your device even when cloud sync is on, and is not shared with household members.

TrueSummit does not include third-party analytics, advertising, or crash-reporting tools. If you choose to share diagnostics with app developers in your device settings, Apple may provide us with anonymized crash reports.

How we use your information

  • To provide core app functionality: budgeting, forecasting, reports, and net-worth tracking.
  • To authenticate you and, if enabled, sync your data across your devices and with household members you invite.
  • To keep the service secure and prevent fraud and abuse.

We do not use your data for advertising, we do not sell your data, and we do not use it to track you across other apps or websites.

AI insights

How TrueSummit generates insights depends on your device:

  • Apple devices. Insights are generated on your device using Apple Intelligence. Your transactions are not sent to a server to produce them.
  • Android devices. Insights are generated using Google’s Gemini API, under Google’s paid API tier. To produce an insight, relevant financial details (such as amounts, categories, and merchant names) are sent through our server, which does not keep a copy, to Google’s Gemini service, processed to return the insight, and used only for that purpose. Because this is Google’s paid tier, Google does not use this content to train or improve its models. Google retains it for up to 55 days solely to detect abuse and policy violations, then deletes it. See Google’s terms at ai.google.dev/gemini-api/terms.

In all cases, your financial data is never sold, never used for advertising, and never used to train Google’s models.

Cloud sync and local-only mode

Cloud sync lets you use TrueSummit across devices and share a budget with your household. You can turn on “Keep data on this device only” in Settings → Privacy & Data. This stops all future cloud syncing, including cross-device and household sharing. Data that was already synced stays in the cloud until you tap “Erase My Cloud Data” on the same screen. Linked banks still use the internet to fetch new transactions, which pass through our server as described above.

Household sharing

If you invite someone to your household, they can see all of the household’s synced data: accounts, balances, transactions, budgets, goals, and related notes and categories. Members can also edit that data; viewers can only read it. FinanceKit data (Apple Card, Apple Cash, and Savings) is never shared. The household owner controls the shared data — if the owner deletes their account, the household and its data are deleted for everyone in it. A member who deletes their account only leaves the household.

Third-party services

TrueSummit relies on a small number of service providers who process data on our behalf:

  • Supabase — authentication and encrypted cloud storage/sync of your account and financial data.
  • Cloudflare (R2) — storage for encrypted daily backups of our database, used only for disaster recovery.
  • Plaid — secure connections to your bank and delivery of account and transaction data. See Plaid’s privacy practices at plaid.com/legal.
  • Apple — Sign in with Apple, App Store in-app purchases/subscriptions, and, with your permission, FinanceKit data.
  • Google (Gemini API) — on Android only, generates your AI insights, under Google’s paid API tier. Relevant financial details are sent to Google to produce each insight. Because this is Google’s paid tier, Google does not use this data to train its models, and retains it for up to 55 days for abuse-monitoring purposes only. See Google’s Gemini API terms.
  • unavatar.io (optional merchant logos) — the “Show merchant logos” setting is off by default. When you turn it on, a website domain guessed from each merchant name (for example, “starbucks.com”) is sent to unavatar.io to fetch the merchant’s icon. No amounts, dates, or account details are sent. You can turn it off at any time.

Data storage and security

Data transmitted between the app and our providers is encrypted in transit (HTTPS/TLS). Sensitive tokens are stored in the device Keychain. You can protect the app with Face ID, Touch ID, or your device passcode. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

Your choices and rights

  • Export. Settings → Privacy & Data → “Export All My Data” produces a complete JSON copy of your data.
  • Erase cloud data. “Erase My Cloud Data” on the same screen deletes your synced data from our servers and keeps your account.
  • Delete your account. In the app, go to Settings → Sync & Account and tap Delete Account. This disconnects your linked banks at Plaid, deletes your synced data and households you own, and deletes your sign-in account. See Delete Account for details. Deleting the app removes the data stored on your device.
  • Disconnect. You can unlink banks at any time, which also removes the connection at Plaid, and you can switch to local-only mode at any time.

Data retention

We retain your account and synced data while your account is active. When you erase your cloud data or delete your account, the data is removed from our live database immediately. Copies in our encrypted backups are deleted automatically within 30 days. We may retain limited records where the law requires it — for example, records of payments and subscriptions for tax and accounting purposes, for up to 7 years.

Linked banks. When you delete your account, we disconnect your linked banks at Plaid within a day, however you deleted it. If your trial or subscription has ended and your banks haven’t synced for 30 days, we also disconnect them at Plaid and delete our encrypted copy of the connection key. If you come back, you can reconnect your bank in the app.

Inactive accounts. If you haven’t signed in for 24 months, we’ll email you at the address on your account. If you don’t sign in within 30 days of that email, we delete your account and its data the same way as if you had deleted it yourself.

Deletion by email. Instead of using the app or our Delete Account page, you can request deletion by emailing info@truesummitapp.com from the address on your account. We’ll verify it’s you before acting on the request, complete it within 30 days, and never later than 45 days. There’s no fee.

Deletion records. Once a deletion is complete, we keep a record that it happened — the date and outcome only, not the deleted data itself — for 24 months, to show we met our obligations.

Support emails. If you email us for help, we keep that correspondence for 24 months after the issue is resolved, then delete it.

Subscriptions

TrueSummit offers a 30-day free trial followed by auto-renewable subscriptions. Purchases and renewals are processed by Apple; we do not receive or store your payment card details. You can manage or cancel a subscription in your Apple ID settings.

Children

TrueSummit is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, noted in the app.

Contact us

Questions about this policy or your data, or want to report a security concern? Email info@truesummitapp.com, or write to us at:

Summit Collective LLC
7533 S Center View Ct, Ste N
West Jordan, UT 84084
United States