Privacy Policy
Last updated:
1. Introduction
1.1 This Privacy Policy explains how Yalhi Software Solutions Inc., a software company based in British Columbia, Canada (the "Company", "we" or "us"), collects, uses, discloses and retains personal information in connection with the TrueSum desktop application (the "Software"), the cloud synchronization service (the "Sync Service") and the website at truesum.app (the "Website").
1.2 The Company has designated a Privacy Officer, who can be reached at support@truesum.app.
1.3 Capitalized terms not defined in this Privacy Policy have the meaning given in the Terms of Service.
2. Summary
2.1 Records you enter into the Software are stored on your computer. They are transmitted to the Company's service providers only if you enable the Sync Service for a business.
2.2 Usage analytics are anonymous. They contain no amounts, names or text entered by you.
2.3 The Company collects your email address only when you make a purchase or create an account.
2.4 The Company does not sell personal information, and does not use your records or account information for advertising.
2.5 You may delete your account at any time from the Software or the Website, and may request the deletion of any other personal information by email.
3. Information transmitted by the Software
3.1 While the Sync Service is disabled, the Software transmits only the information set out below. Transactions, accounts, customers and amounts are not transmitted.
| Purpose | Information | When | Recipient | How to stop it |
|---|---|---|---|---|
| Trial | An identifier of the computer, derived from its hardware ID, and whether a business has been created and a transaction saved (yes or no) | First launch, and each launch during the Trial | The Company's licence server | Cannot be stopped |
| Licence activation | The Licence key, which contains the purchase email address; the computer identifier; the computer's name, application version, operating system version and processor | When a Licence key is entered | The Company's licence server | Cannot be stopped |
| Licence verification | The Licence key and the computer identifier | Approximately once an hour | The Company's licence server | Privacy Mode |
| Update check | No information; a request for the latest version | At launch, every four hours, and when the computer wakes | The Website, then Cloudflare for the download | Privacy Mode |
| Exchange rates | A currency code and a date | When a business is opened, and when a foreign currency is used | Frankfurter | Privacy Mode |
| Connectivity check | No information; a request to determine whether the computer is online | Every 30 seconds | Cloudflare and Google | Privacy Mode |
| Sign-in service | No information until you sign in | When the Software starts | Clerk | Privacy Mode |
| Usage analytics | Events such as "report opened" or "invoice created", with predefined values only: report name, transaction type, error code, a business's country, base currency and type, application and operating system version, processor, language, and the number of days since the Software was first opened | During use | Aptabase | Licence holders: the setting in Settings, or Privacy Mode. Cannot be stopped during the Trial. |
3.2 Each request discloses your IP address to its recipient. The Company does not store IP addresses in its database. The Website's hosting provider retains them in request logs for a limited period.
3.3 Usage analytics contain no amounts, names or text entered by you, set no cookies, and are not linked to an identifiable individual.
3.4 The Software does not transmit crash reports. Diagnostic files are saved only to a location you choose, and reach the Company only if you send them.
3.5 Privacy Mode, available to Licence holders, blocks every transmission listed above except Licence activation. With Privacy Mode enabled, activation transmits only the Licence key and the computer identifier.
4. Accounts and the Sync Service
4.1 An account is required only for the Sync Service and the account pages. Accounts are managed by Clerk, which holds your email address and sign-in credentials. The Company stores a copy of your email address.
4.2 When you enable the Sync Service for a business, all records of that business, including transactions, accounts, customers and amounts, are transmitted to and stored by Turso, in a database the Company creates for that business.
4.3 Records stored by the Sync Service are not encrypted at rest. They are encrypted in transit between your computer and Turso.
4.4 Synchronized records are processed only by the Sync Service, to keep your computers synchronized. Company personnel do not access them.
4.5 While you are signed in, the Software also transmits the name of each synchronized business, and the computer's identifier, name, application version, operating system version and processor, so that your account pages can list your businesses and computers.
4.6 Disabling synchronization for a business retains its cloud copy. Deleting your account deletes all cloud copies. Turso can restore a deleted cloud copy for up to five (5) days, after which it is permanently erased. The deletion of a single business's cloud copy may be requested by email.
5. The Website
5.1 The Website uses the following cookies and browser storage:
| Item | Purpose | Duration |
|---|---|---|
| Sign-in cookies (Clerk) | Keep you signed in to your account pages | Until you sign out |
| Checkout cookie | Associates a purchase with your account during payment | 15 minutes |
| Theme preference (browser storage) | Remembers the light or dark theme | Until cleared |
| Google Ads cookie | Attributes a download or purchase to an advertisement | Set by Google |
5.2 Visitors from the European Union, the European Economic Area and the United Kingdom are asked for consent through a notice at the bottom of the page, and Google Ads is not loaded unless they accept. Other visitors may opt out through Google's ad settings or by blocking cookies in their browser.
5.3 The Website counts visits with Vercel Web Analytics, which sets no cookies and is not linked to an identifiable individual.
5.4 If you join the waitlist, Clerk stores your email address.
6. Payments and email
6.1 Purchases are processed by Paddle as reseller and merchant of record: Paddle.com Inc. for buyers in the United States, Paddle.com (Canada) Ltd. for buyers in Canada, and Paddle.com Market Limited for buyers elsewhere. Paddle collects payment details under its own privacy policy. The Company does not receive card details.
6.2 From Paddle, the Company receives your email address, your Paddle customer identifier, and your transaction and subscription identifiers. They are used to issue Licences and to manage access to the Sync Service.
6.3 The pricing page requests prices in your local currency from Paddle, which discloses your IP address to Paddle.
6.4 The Company sends transactional email through Mailgun: Licence keys after a purchase or after twelve (12) paid months of a Subscription, and again on request. Sign-in emails are sent by Clerk. The Company does not send marketing email.
7. Service providers and transfers outside Canada
7.1 The Company uses the service providers below solely to operate TrueSum. Most of them store information outside Canada, primarily in the United States, where it is subject to the laws of that country, including lawful access by its authorities.
| Provider | Purpose |
|---|---|
| Turso | Storage of synchronized records |
| Neon | The Company's database: account email addresses, Licences, computers, Subscriptions |
| Clerk | Accounts, sign-in and waitlist |
| Paddle | Payments, invoices and refunds |
| Vercel | Website hosting, request logs and visit counts |
| Cloudflare | Software downloads; routing of email to support@truesum.app |
| Support email (Google Workspace); Google Ads; connectivity checks | |
| Mailgun | Transactional email |
| Aptabase | Anonymous usage analytics |
| Slack | Notifications to the Company of purchases, subscription cancellations, failed payments, refunds and chargebacks, trials and first sign-ins, and of problems on the Website, containing payment and account identifiers and amounts but no email addresses or names |
8. Retention
8.1 The Company retains personal information as follows:
| Information | Retention |
|---|---|
| Account: email address, business names, computers, synchronized records | Until the account is deleted; synchronized records up to five (5) days after |
| Record of the account's access to the Sync Service | One (1) year |
| Licence records: purchase email address, transaction identifier, computer identifiers | For as long as the Licence exists, so that it remains valid and can be moved to another computer |
| Trial records: computer identifier, and when a business was first created and a transaction first saved | Retained, so that a Trial cannot be restarted on the same computer |
| Subscription and payment records | As long as tax law requires, generally six (6) years, including after the account is deleted |
| Anonymous usage analytics | In accordance with Aptabase's retention policy |
9. Your rights and choices
9.1 Licence holders may enable Privacy Mode in Settings, which stops the transmissions described in Section 3.5.
9.2 Licence holders may disable usage analytics with the "Send Anonymous Usage Analytics" setting.
9.3 You may disable synchronization for a business at any time. Its cloud copy is retained until deleted.
9.4 You may delete your account in the Software's Account window, or on the Website under Settings. Deletion cancels your Subscription and deletes every cloud copy of your records, your account records and your sign-in credentials. Turso can restore a deleted cloud copy for up to five (5) days, after which it is permanently erased. Files on your computer are not affected.
9.5 You may request access to, correction of, or deletion of any other personal information the Company holds about you, including purchases made without an account, Trial records, waitlist entries and a single business's cloud copy, by writing to support@truesum.app. The Company responds within thirty (30) days.
9.6 If you are in the European Union, the European Economic Area or the United Kingdom, you have the right to access, rectify, erase and port your personal information, and to object to or restrict its processing. The Company processes personal information to perform its contract with you (Licences and the Sync Service), for its legitimate interests in preventing misuse of Licences and improving the Software (Licence verification and anonymous usage analytics), and with your consent (Google Ads).
9.7 You may direct a complaint to the Company first. You may also contact the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.
10. Children
10.1 The Software is intended for businesses and adults. It is not directed at children under sixteen (16), and the Company does not knowingly collect their personal information.
11. Changes to this Privacy Policy
11.1 The Company may change this Privacy Policy at any time without notice. The current version is always published at truesum.app/privacy, and the date at the top shows when it last changed.
12. Contact
Privacy Officer
Yalhi Software Solutions Inc.
British Columbia, Canada
support@truesum.app