Privacy Policy — SumDoc and SumSheet

This policy covers the mobile applications. The sumoffice.com website is described separately on the Legal page.

Effective date: 15 September 2026 (previous version: 5 September 2026)

This Privacy Policy applies to the mobile applications SumDoc (Android com.sumoffice.sumdoc, iOS) and SumSheet (Android com.sumoffice.sumsheet, iOS), published by HEALTH INFORMATIC SECURITY SYSTEM, S.L. (“HISS”, “we”). Where the desktop applications are mentioned, the same rules apply to them.

1. We do not collect personal data

The applications contain no analytics, no telemetry, no advertising and no tracking of any kind. We do not build profiles and we do not collect data for our own purposes. The only things that ever leave your device are the support conversation, the problem report and the automatic error report described in section 5. Nothing else is sent, to us or to anyone.

2. Your files stay on your device

SumDoc edits DOCX documents and SumSheet edits XLSX spreadsheets. All processing happens locally on your device. Your files are never uploaded to us or to anyone else. What section 5 describes carries the file name, so that you can recognise your own report, but never the file itself; the one place where a page of your document can be seen is the desktop screenshot in a problem report (5.2, 5.3), which shows the window exactly as you saw it. On mobile there is no screenshot.

The applications make no network requests except the ones listed in section 5. Today that means:

SumDoc for Android and iOS, from version 2026.3.32 — the in-app assistant, problem reports and automatic error reports (section 5).
SumDoc for macOS — the same (section 5).
SumSheet for Android and iOS — no network requests at all. The assistant will arrive in a later version; this policy will be updated first.
SumSheet for macOS — the same (section 5).

3. No accounts

The applications require no account, no registration and no sign-in. We hold no user records. The installation token described in section 5 is not an account: it is not linked to a name, an e-mail address or any other identifier of yours.

4. Permissions

On Android and iOS, the applications only read and write a file that you select yourself through the system file picker or open from another application (“Open with”). No other data on your device is accessed: not your contacts, location, photos, camera, microphone or other files.

SumDoc for Android, from version 2026.3.32, declares the INTERNET permission. It is used solely for section 5 and for nothing else. SumSheet for Android declares no permissions at all. On iOS the applications request no permissions.

On macOS, the applications run in Apple's sandbox and can read and write only the files you open or save yourself. They additionally hold the network entitlement, which is used solely for section 5.

5. The assistant, problem reports and automatic error reports

The applications include a small support assistant (the paper-clip in the corner) with a Report a problem form. It exists so that you can get help and so that we can fix what breaks. Data leaves your device only in the three cases below, and in each case you can read here exactly what is included.

5.1 When you write to the assistant

Nothing is sent until you press Send in the assistant's chat. A message includes:

the text you write yourself;
environment details — the application name and version, the operating system version and the name of the open document (never its content);
the titles and states of your earlier reports from this installation, so that the assistant can answer “what happened to my report”;
the text of the last error the application showed, if one happened in the previous 15 minutes.

5.2 When you send a problem report

Nothing is sent unless you press Send in the report form, and you can see and untick every part before sending. A report may include, according to what you leave ticked:

the text you write yourself, what you were doing, the area you tick and the service level you request;
environment details, as in 5.1;
images you attach yourself;
on desktop only: a screenshot of the document window (the page will be visible exactly as you see it), a recording of the last minute of interface activity (typed text and clipboard contents are not recorded) and the application's own logs;
on mobile: the last lines of the application's own log — timings, internal command names and error texts. Your document's text is not in it.

5.3 Automatic error reports

If the application itself fails — the document engine stops answering, or the application hits an internal error it cannot handle — it sends an automatic error report so that we learn about the failure even if you never write to us. The report contains the error text and the environment details from 5.1, plus:

on mobile (SumDoc from 2026.3.32): the last lines of the application's own log (5.2) — nothing else, no screenshot and nothing you typed;
on desktop: the screenshot of the document window, the recording of the last minute of interface activity and the application's own logs, exactly as described in 5.2 — because on desktop the window is usually what needs to be seen to fix the failure.

Apart from that desktop screenshot, it never contains your document's content. The same error is reported once, and no more than five automatic reports are sent per hour. The assistant tells you when this has happened. There is currently no switch to turn automatic error reports off.

5.4 Installation registration

The first time the assistant needs to reach our support desk, the application registers the installation: it sends a random installation identifier generated on your device (not derived from your hardware, your accounts or any advertising identifier), the application name and version and the operating system version, and receives a token that is stored on the device. The token lets the support desk send answers back to the same installation and lets us revoke a single installation in case of abuse. It is not linked to you. Deleting the application's data, or the application, deletes it.

5.5 Where it goes and how long it stays

Messages and reports go to our support desk and are used only to help you and to reproduce and fix the problem. They are not used for advertising, profiling or tracking, and they are not sold or shared with anyone else. The support desk is currently operated for us on a partner-managed host, which acts on our instructions only; we are moving it to our own infrastructure. Reports are kept for as long as the problem is being worked on and for a reasonable time afterwards to confirm the fix; you can ask us to delete a report at any time by quoting its number (section 13).

If you would rather not send diagnostics at all, do not use the assistant or the button — write to the address in section 13 instead. In SumSheet for mobile there is no assistant yet and nothing is sent.

6. No advertising, no in-app purchases

The applications contain no advertising, no advertising identifiers and no in-app purchases.

7. Third parties

No data is sold to, shared with or disclosed to any third party for its own purposes. The only third party involved is the host that runs our support desk for us (section 5.5), which processes messages and reports on our instructions only.

8. Children

The applications are general-purpose document and spreadsheet editors. They are not directed at children and collect no data from anyone, including children, beyond what section 5 describes.

9. If you write to us

If you contact us by e-mail, we use your message and address only to answer you.

10. Data deletion

We store nothing about you except the messages and reports you or the application sent under section 5. To have them deleted, e-mail hello@sumoffice.com from any address and say “delete my SumDoc reports” (or SumSheet), quoting the report numbers — you will find them in the assistant's Reports tab — or, if you prefer, the date and rough time you sent them. We delete the reports, the messages and the installation record within 30 days and confirm by reply. No account is needed for this.

Documents you edit remain your own files in your own device storage and can be deleted by you at any time. The installation token is deleted together with the application's data (Android: Settings → Apps → SumDoc → Clear data; iOS: delete the application).

11. Your rights

Under the GDPR you may request access, rectification, erasure, restriction or portability of your personal data, and lodge a complaint with the Spanish Data Protection Agency (AEPD). The only data we may hold from the applications are the messages and reports described in section 5.

12. Changes

If this policy changes, the updated version will be published at this address with a new effective date.

13. Contact

HEALTH INFORMATIC SECURITY SYSTEM, S.L. (HISS)
Av. Cibeles 1, Floor 9, CP 29014, Málaga, Spain
Tax Identification Number ESB86739125
E-mail: hello@sumoffice.com