Privacy Policy

Scope and effective date

Effective from 7 October 2026.

This Privacy Policy explains what personal data Sumaself collects, what it is used for, where it is stored, who it is shared with, and how we protect it. It applies when you use the Sumaself app on a phone or on the web, communicate with other users, or contact support. It does not apply to services run separately by your device maker, operating system, browser, app store, email provider, or any other service you choose.

Sumaself is an online service. Your personal data is processed on our systems, on systems of service providers that work for us, and on your device when that is needed for the service to work.

Who is responsible and how to contact us

Sumaself decides what personal data is used for in this app and how the app handles it. So we act as the controller of personal data for the Sumaself service. You can send privacy questions, complaints, or requests to support@sumaself.com.

Inside the app, you can manage your profile details, sharing, analytics, notifications, and account deletion. When you contact us, we use what you write to reply, and we keep a record of your request as needed.

Data we collect

Depending on the features you use, Sumaself may collect and process:

account and profile data: name, user ID, email address, gender, occupation, interests, likes and dislikes, status, mood, and avatar settings;
birth data and what is calculated from it: birth date, birth time, a note that the birth time is unknown, birth place, coordinates, time zone, and astrology, numerology, and Ba Zi results;
test, quiz, and practice data: answers, progress, scores, estimated ranges, result details, completion dates, and your Daily learning answers and review schedule;
relationship data: love journal entries with the photos and notes in Our tales that you share with your partner, ratings, dates, and partner details, plus the notes and flags in your watchlist about friends you watch;
your private diary: the words, moods, and photos on each page, and the diary cover;
data about other people you save: the name, gender, birth date, birth time, and birth place of people you add for Good Days or home readings, such as a partner, a business partner, or someone you live with;
home and plan data: the direction your home faces, its period, who lives there, the room uses you enter, and the Good Days plans you save with their dates and the people involved;
social data: friends, Circles, display choices, sharing settings, messages, and notifications;
profile photos, Circle photos, photos in your diary and love journal, diary and love journal covers, and voice notes in direct chats and Circles;
your approximate location and your distance to other users while Discoverable is on;
Suma+ purchase data: the plan, the purchase and renewal dates, and the purchase code from the app store (the app store handles payment details, and they do not reach us); and
technical and usage data: IP address, device and browser type, operating system, app version, language, notification token, sign-in and activity times, screens and features opened, diagnostic data, crash reports, cookie or local storage IDs, notification choices, quiet hours, Discoverable by user ID and Discoverable choices, and analytics choice.

If you save another person's birth data, make sure they know and agree. That data is used only to calculate the readings you ask for, only you can see it, and it is never used to create an account or profile for that person. You can delete it at any time.

Some of what you write may touch on sensitive matters, such as health, beliefs, relationships, or private conversations. You decide what you want to write.

Photos, voice notes, location and device permissions

Sumaself asks for photo access when you choose a profile photo, a Circle photo, a photo for a diary page or a love journal note, or a diary or love journal cover. You pick the image yourself through your device's own photo picker. You crop a Circle photo to a circle first. Profile photos and Circle photos are stored as a smaller JPEG copy, usually under 1 MB, with your profile or that Circle. Anyone who can see a Circle can see its photo, including people who are not your friends. For users under 18, every member of their Circles is a friend. Only you can see the photos in your diary, while photos in the love journal can be seen by you and your partner. You cannot send photos in direct chats or in Circles.

When you record a voice note in a direct chat or a Circle, Sumaself asks for microphone access and stores the recording with that conversation. A voice note in a Circle can be heard by every member of that Circle, including people who are not your friends. For users under 18, every member of their Circles is a friend.

While Discoverable is on, Sumaself uses your device's approximate location to work out your distance to other users in New friends. Other people see only an approximate distance, such as under 1 km or about 3 km, never your exact location. We keep only your latest approximate location, not a history of where you have been, and delete it when you turn the setting off. Birth place coordinates still come from the city you pick from the list, not from your device's location. The home compass in Ba Zi also uses your device's location, only while the compass is open, to read which way your home faces. We keep the direction you save, not your location.

Sumaself does not ask for camera, contacts, or ad tracking access. Permission requests are controlled by your operating system and browser, which sometimes let you give access to only some photos. You can change permissions at any time in your device or browser settings. After that, however, photo, voice note, home compass, or New friends features may stop working.

What data is used for

We use your personal data to:

create your account and self map, confirm that the account is yours, and display it;
calculate and explain test results, your compatibility with friends (from both people's birth data and test results), astrology, numerology, Ba Zi, Good Days, home readings, and other readings, including for the people you save;
save and sync progress, love journals, your diary, your watchlist, plans, settings, and conversations;
connect you with other users through account search and New friends, according to the display rules in the Terms of Service and your sharing choices;
import, shrink, display, and remove the photos you choose, and record and play voice notes you send;
send safety notices, give support, and handle data corrections you ask for; and
run, secure, fix, analyze, and improve the service.

When the law asks for a legal basis, we use data to carry out our agreement with you, with your consent, to meet legal duties, to protect your vital interests (your life or safety), and for our legitimate interest in running, securing, and improving Sumaself, as long as that interest does not outweigh your rights. When we use data based on your consent, you can withdraw that consent at any time for future use. Some consent is part of how the service works, such as the display rules in the Terms of Service; you withdraw it by deleting your account.

Where we get data from

We get most data directly from you: when you sign in, finish registration, answer a test, create content, change settings, communicate with other users, or contact support. When you sign in with Google or Apple, they send us basic details, such as your name and email address, to confirm your account. If you choose Hide My Email with Apple, we receive only a private relay address from Apple. Technical and usage data is collected automatically from the app, your device, and our servers.

From the data you give, we also produce scores, categories, compatibility signals, recommendations, and readings. Data about other people you save, such as the birth date of someone you live with, comes from you, not from that person. We may also receive reports from other users, app stores, security providers, and service providers when this is needed to run and protect Sumaself.

Give only data that is correct and actually needed. Do not send passwords, official ID documents, bank or card details, intimate photos, or another person's sensitive information to support.

Who can see your data

People who are not your friends can see only your user ID, your avatar (which shows your gender), your SPM type with its avatar, your hobbies, your likes, and your approximate distance while you are visible in New friends. They cannot see your display name, profile photo, age, Chinese zodiac, Western sign, birth details, status, mood, or test results. The Discoverable by user ID setting is off at the start. If you turn it on, others can find that preview when they search for your @user ID in Add friend. If you turn that setting off, your account no longer appears in new search results. Friend requests or Circle content already sent are not deleted.

Discoverable is on from the start for users aged 18 and over. While it is on, other users can see your public preview and your approximate distance in New friends, even when Discoverable by user ID is off. That preview is the same one described above. If you turn it off, your account disappears from New friends, and you cannot see other users there either.

Once you are friends, your friend can always see your display name, profile photo, avatar and SPM avatar, Chinese zodiac and Western zodiac artwork with their readings, age, status, mood, hobbies, and likes. Your Life Path and your Mind and Personality test results appear according to the sharing settings you choose for that friend. Those choices still apply if the friend becomes your partner in Sumaself. Your birth date and time are never shown, except your birthday to your partner in Sumaself. Your signs and age can give a rough hint of when you were born, and a user ID or the mix of details shown may let other people recognize you or find your accounts elsewhere.

The Friendship and the Business partners and work compatibility readings use both people's birth data and test results, including results either of you hides from the other. They show only the result of the calculation, such as a score, a verdict, and advice, and never a birth date, a birth time, or a hidden result. A hidden Big Five result still counts toward the score, but its strongest trait is not shown.

Only you can read your diary, and not even your partner can. Only you can see the notes and flags in your watchlist, and your friends are not told when you add them to it. The love journal and Our tales can be read by you and your partner. The people you save, your home data, your Good Days plans, and your Daily learning answers can be seen only by you.

In Circle member lists, chats, threads, and invitations, people who are not your friends see your @user ID instead of your display name. Your friends can see your display name. What you post yourself may still show people who you are. Messages, Circle content, and results you share reach the people you send them to, and they can copy or share them again.

If a report about an account, Circle, or message reaches our moderation service, authorized moderators may read the full history of the related conversation. This includes messages from before the report and new messages while the report is open. Moderators do not join as participants, appear in the member list, or trigger read receipts. Access for reviewing the report is logged and ends when the report is closed.

We share data with providers that help us with sign-in, cloud hosting, storage, content delivery, notifications, analytics, crash reports, security, email, and user support. They are bound by contracts suited to their role. We may also share data with professional advisers, with authorities when the law or a valid legal process requires it, or to protect the rights, safety, and security of users, Sumaself, or others. If Sumaself merges with another company, receives funding, is reorganized, or is lawfully sold, the related data may be transferred too, while still following the notice and protection rules that apply.

Sumaself does not sell personal data.

Analytics, advertising and automated decisions

When Anonymous analytics is on, we collect counts of screens opened, how features are used, performance data, diagnostic data, and crash reports. This data is separated from your identity or uses a pseudonym, and we use it only to understand and improve Sumaself. Account and security records needed to run and protect the service are still processed, whatever your analytics choice.

We do not sell personal data, and we do not use third-party advertising cookies, cross-app tracking, or targeted ads. We also do not use private content in your account, birth data, test answers, love journals, your diary, or messages to train an AI model.

The app calculates scores, categories, and readings automatically from the details you enter. These results are for self-reflection and entertainment. Sumaself does not use them to make legal decisions or other decisions with a similarly serious effect on you.

Where data is stored and how it is secured

Account data and content you upload are stored on Sumaself's systems and with hosting and storage providers under contract with us. A small amount of session, cache, and offline data may also be stored on your device or in your browser, and it may be included in backups managed by you or by the platform provider.

We use reasonable management, technical, and organizational safeguards that suit the type and risk of the data. Examples are limits on access, encryption while data is sent, monitoring, backups, and steps for handling incidents. You also need to protect your Google or Apple account and device, install security updates, and limit access to shared devices.

If a personal data breach happens, we tell you and the personal data protection authority in writing within 3x24 hours (72 hours) after we learn of it. The notice says which data was affected, when and how it happened, and what we are doing to handle it and recover. We send it to your account's email address and show it in the app.

No way of sending or storing data is completely secure. If you think your account or data has been broken into, secure your Google or Apple account and device, and then contact support@sumaself.com right away.

How long data is kept

We keep account data while your account is active and for as long as it is reasonably needed to run the service. Some records may be kept longer when they are needed for security, fraud prevention, dispute resolution, enforcing our rules, following the law, or dealing with legal claims.

When you delete content or your account, we remove it from active systems, or make it so that it can no longer be linked to you, within 30 days. The exceptions are data that must be held for legal reasons, security records, and content already saved by recipients. Backup copies are kept separate and overwritten on a schedule, so deleted data is gone from them within 90 days. Deleting the app or signing out does not delete your account.

We keep support emails, records of consent and acceptance of terms, and transaction or security records only for as long as suits their purpose and the applicable law. When they are no longer needed, they are deleted or separated from your identity.

Your choices and rights

You can edit the available profile fields, manage privacy and notification settings, turn off Discoverable, delete certain content, withdraw photo, microphone, or location permission, or ask for your account to be deleted.

Depending on the applicable law, you may have the right to get an explanation of how your data is processed, see the personal data Sumaself holds about you, correct wrong data, withdraw consent, object to or limit certain processing, ask for data to be deleted, receive a copy of your data in a portable format, and complain to the relevant data protection authority. These rights may have conditions and exceptions under the law.

Send your request to support@sumaself.com. We may need to confirm your identity and ask for details about your request. We answer requests about your rights within 3x24 hours (72 hours) after we receive them. We may refuse or limit a request when the law allows, for example to protect another person's rights, and we will tell you why. If you withdraw consent, data that was already processed lawfully before that is not affected.

Age limits

Sumaself is only for people aged 16 and over. We use the birth date entered at registration to refuse registration when it shows an age under 16. A saved account whose birth date shows an age under 16 also cannot be opened. This check is based only on the birth date the account holder enters. We do not check age in any other way.

For account holders aged 16 to 17, registration requires a confirmation that a parent or guardian knows about and agrees to their use of Sumaself. We store that confirmation with the account. We do not check whether the confirmation is true, or who the parent or guardian is.

Accounts of people under 18 get extra protection. The account does not appear in New friends, and Discoverable cannot be turned on. Discoverable by user ID is also off and cannot be turned on. People who are not friends see only the user ID and avatar (the avatar shows the holder's gender), with no SPM type, hobbies, or likes. Anonymous analytics is off from the start. For users under 18, we do not use their activity to suggest people or Circles to them, and readings are made from the details they enter only when they open them. All tests stay available. Other people can find the account only by typing its exact user ID, which the account holder can share with friends they know, and then send a friend request. They can join only Circles where every member is their friend, and a Circle they create is private.

A parent, guardian, or account holder can contact support@sumaself.com to see, correct, or delete the account's data, or to close the account. Also contact us if you believe an account holds a child's data without a parent's or guardian's permission, or that someone under 16 has an account. Limiting access to an account does not automatically delete the data saved in it.

Processing outside Indonesia

Sumaself and its service providers may process personal data in Indonesia and in other countries where they operate. The data protection rules in those countries may differ from the rules where you live.

When data is sent outside Indonesia, we apply the protection the law requires. This may be an assessment that the destination country offers equal protection, a binding agreement that gives strong enough protection, or your consent where the law allows and requires it. We also use technical and organizational safeguards that fit the risk.

Your device platform, Google, Apple, your email provider, and other sharing services may send data abroad on their own, under their own privacy policies.

Policy changes and complaints

We may update this Privacy Policy when the app, the way we handle data, or the law changes. The new version will show a new effective date. If a change is significant and affects how data is collected or used, we will give you extra notice or ask for your consent when the law requires it.

You can send questions, requests about your rights, or complaints to support@sumaself.com. Describe the problem without including sensitive data that is not needed. We answer requests about your rights within 3x24 hours, as explained in Your choices and rights, We confirm other complaints within 3 working days and give you our answer within 14 days of receiving them.

You can also complain to the relevant personal data protection authority or use another route the law provides. Contacting us first does not remove that right.