summa

Privacy

Your data. Your control.

What we collect

We keep it minimal:

  • Email Optional. Only if you link one for card recovery.
  • Language Your preferred display language.
  • Stamps Your collection history and redeemed benefits.
  • Wallet pass If you add your card to Apple Wallet or Google Wallet, we store a timestamp recording when you added it.
  • Page views Anonymous usage data: which pages are visited, screen size, browser language, and referring website. No IP addresses are stored.

Why we collect it

  • Email helps you recover your card if you lose access.
  • Language shows the app in your preferred language.
  • Stamps track your progress in shop loyalty programs.
  • Wallet pass lets us update your pass in Apple Wallet when your stamp count changes.
  • Page views help us understand which content is useful and how visitors find Summa.

Website analytics

We collect anonymous page view data to understand how our website is used. This data includes the page visited, screen size, browser language, and referring website. We do not use cookies, do not store IP addresses, and do not track individual users across days. A temporary, non-reversible hash is used to estimate unique visitors within a single day — this hash changes daily and cannot identify you. Page view data is aggregated into daily statistics after 180 days, and raw data is then deleted. No personal data is collected or shared with third parties.

Your rights

You have full control:

  • Access Download your data at any time.
  • Edit Update your email address.
  • Delete Remove everything permanently.

All directly from your card’s settings page — no need to contact anyone.

Data retention

Your data is stored until you delete it. When you delete your card, your email address is removed immediately. Anonymous statistics (e.g. stamp counts) may be retained for the shop’s records.

Legal basis

We process personal data only where necessary to provide the service (performance of a contract), where you choose to provide it (consent), or where we have a legitimate interest in operating and improving Summa.

Data for shop owners

If you use Summa as a shop, we additionally collect:

  • Email and password For your shop account. Passwords are stored only as cryptographic hashes.
  • Payment data Handled by Stripe. We do not store credit card details — only a Stripe customer ID to manage your subscription.
  • Shop information Name, locations, programs, and settings you enter in Summa.

You can request deletion of your shop account at any time via ferdinand@summacard.com.

Cookies

Summa uses two cookies that are necessary for operation:

  • summa_cards Stores your card associations and preferences (e.g. language, sound). No tracking.
  • summa_session Authenticates shop owners after login.

Both cookies are functional and do not require consent. We do not use any analytics, tracking, or advertising cookies.

Third parties

We use Amazon SES to send emails. We use the EU (Frankfurt) region. No trackers, no analytics, no data sales.

For shop subscription billing, we use Stripe. Stripe processes payment data under its own privacy policy. We do not store card numbers or bank details.

For Apple Wallet passes, Apple may send us device registration tokens to enable pass updates. For Google Wallet passes, we communicate with the Google Wallet API to create and update passes. These tokens and references are deleted when you delete your card. No personal data from wallet passes is shared with third parties.

Controller

The data controller is Ferdinand Salis, Vienna, Austria.
Contact: ferdinand@summacard.com

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority (DSB).

Last updated: 2026-03-02