1. Who this applies to
SUNY: Work & Money OS is operated by SUNY SLT LLC. SUNY is offered in the United States only. You must be 18 or older to create an account. SUNY is not directed to children and we do not knowingly collect information from anyone under 18. If we learn we have, we delete it.
2. What we collect
- Account information. Your email address and authentication credentials, so you can sign in and recover your account.
- Financial data you enter. Income entries, expense entries, mileage entries, categories, and notes. You choose what to enter. SUNY does not require a Social Security number, tax identification number, bank login, bank-account number, or payment-card number for core tracking. SUNY does not connect to your bank, your employer, or any payroll or payment platform, and does not import transactions automatically.
- Subscription status. Whether you have an active SUNY+ subscription, which plan, and when it renews or lapses.
- Diagnostics. Crash reports and error records, including device model, operating system version, app version, and the technical state of the app at the moment of failure.
- Support correspondence. What you send us when you contact support.
3. What we do not collect
- We do not collect or retain receipt images. See §5.
- We do not collect your Social Security number, tax identification number, bank account numbers, or card numbers.
- Location (Android 1.0): SUNY uses user-started foreground GPS mileage only. Android 1.0 does not use true operating-system background location. Precise GPS is collected only during a trip you explicitly start on the Mileage screen. The Tax Support feature does not automatically determine your location.
- Contacts and calendar: Android 1.0 does not read your device contacts or external calendar.
- We do not run advertising SDKs in Android 1.0. SUNY's external product-analytics pipeline is not active in the reviewed Android 1.0 release. We do not build advertising profiles.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. How your data is stored
SUNY uses a local-first approach. For free accounts, your financial entries stay on your device. For SUNY+ accounts, your financial entries sync to our servers so they are available across your devices and survive a lost phone. Connected functions send selected information to SUNY services or service providers. Data is encrypted in transit and at rest, and is isolated per account by database-level row security so that one account cannot read another's records.
5. Receipt OCR and AI features
Receipt OCR: When you scan a receipt, the selected image is sent through Lovable AI Gateway and processed by Google Gemini solely to read the values. SUNY does not keep the original OCR image in SUNY database or storage as a receipt-image archive. Only the extracted values — amount, date, merchant, category — are saved as an expense entry you can edit or delete. Lovable AI Gateway or Google Gemini systems might retain request or logging information under their applicable policies and service configuration. We do not claim zero provider retention or that OCR processing is ephemeral. Manual entry remains available for users who do not want to send an image for OCR.
AI messages: SUNY AI messages are processed through Lovable AI Gateway and Google Gemini. Lovable AI Gateway or Google Gemini systems might retain request or logging information under their applicable policies and service configuration. We do not claim zero provider retention.
6. Advertising and analytics
Android 1.0 does not include a third-party advertising SDK. SUNY's external product-analytics pipeline is not active in the reviewed Android 1.0 release. Direct SUNY sponsor placements within the app are identified as commercial placements. SUNY does not provide individual users' financial records to sponsors for targeting.
7. Service providers
We use a small number of vendors to run SUNY. Each receives only what it needs.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Database, authentication, sync | Account identifier, email, your synced entries |
| RevenueCat | Subscription and entitlement management | App-assigned user identifier, purchase and renewal events |
| Sentry | Crash and error diagnostics only | Device and app technical state at time of error |
| Cloudflare | Hosting and network delivery | Standard connection metadata |
| Resend | Transactional email (password reset, receipts) | Your email address |
| Lovable AI Gateway | Routes OCR images and AI messages to Google Gemini | The receipt image you scan; your AI messages |
| Google (Gemini) | Processes OCR images and AI messages | The receipt image you scan; your AI messages |
| Apple / Google | Payment processing for subscriptions | Handled entirely by the platform |
Apple and Google process all consumer subscription payments. SUNY never receives or stores your payment card details. We do not sell your data to any of these providers.
8. Legal disclosure
We may disclose information if required by law, valid legal process, or to protect the rights, safety, or property of SUNY or our users. We will not volunteer your financial records to anyone.
9. How long we keep data
| Data | Retention |
|---|---|
| Account and synced entries | Until you delete your account |
| Receipt images | Not retained by SUNY |
| Crash and error records | 90 days |
| Support correspondence | 24 months |
| Records we must keep by law (e.g. tax and payment records) | As required, then deleted |
10. Deleting your account
You can delete your SUNY account and its associated data at any time.
- In the app: Settings → Account → Delete Account. Successful authenticated in-app account deletion is completed through the in-app deletion process.
- If you cannot access the app: email support@suny.app from the address associated with your SUNY account. SUNY verifies account ownership through a safe verification step before processing any external deletion request. Website or support deletion requests have a target completion time no later than 30 days after account ownership verification, unless limited retention is required for legal, security, fraud, chargeback, accounting, or Creator Partner payout purposes.
- What is deleted: account deletion removes eligible SUNY product data associated with the account, including income, expense, mileage, budget, tax-setting, W-2, client, invoice, appointment, reminder, warranty, synchronization, authentication, and related user records.
- What is retained: limited records needed for security, fraud prevention, chargebacks, legal or accounting requirements, or Creator Partner payout integrity might remain in anonymized or de-identified form.
- Subscriptions: deleting a SUNY account does not cancel an active Google Play or App Store subscription. Google Play and App Store subscription cancellation is a separate action. You do not need to cancel a subscription before deleting a SUNY account.
11. Your rights
Depending on your state, you may have the right to know what we hold about you, to get a copy, to correct it, and to have it deleted. California residents have these rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
SUNY does not sell personal information and does not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.
To exercise any right, use the in-app deletion flow (Settings → Account → Delete Account) or email support@suny.app. We will verify that the request comes from the account holder before acting.
12. Security
Data is encrypted in transit and at rest. Access is restricted and per-account isolation is enforced at the database layer. No system is perfectly secure, and we do not claim otherwise.
13. Changes
If we make a material change, we will update the effective date above and notify you in the app before the change takes effect.
14. Contact
SUNY SLT LLC — support@suny.app