Privacy policy
Last updated 4 October 2026
Outlay is a personal expense tracker made by Sun Innova (Uroš Šunjevarić PR, Serbia). This policy explains what the app stores, where, and what you can do about it. The short version: we keep only what the app needs to work, we do not sell or share it, there are no ads and no tracking, and you can delete everything from inside the app.
What we collect
| Data | Why |
|---|---|
| Email address, and a name if your sign-in provider shares one | To create and identify your account and to send workspace invitations. |
| What you enter: amounts, descriptions, dates, categories, budgets, rules | That is the app. It is stored so it is there the next time you open it. |
| Preferences: language, time zone, reminder times, default payment method | To show the app the way you set it up. |
| A push notification token for your device, if you enable notifications | To deliver the evening reminder and the morning summary you turned on. |
| Technical logs on our server (request time, path, status, errors) | To keep the service running and find faults. Kept for a short time, not linked to analytics. |
We do not collect your location, contacts, bank or card details, or anything from other apps. Entries are typed by you; the app does not read your bank account.
Sign-in
Accounts are handled by Supabase Auth. You can sign in with an email address and password, with Google, or with Apple. With Apple's "Hide My Email" the app only sees the relay address Apple creates for you. We never see your Google or Apple password.
Where the data lives
- Database and sign-in: Supabase, hosted on AWS in Frankfurt, Germany (eu-central-1).
- Application server: a virtual server operated by Hostinger in Germany.
- Backups: an encrypted nightly copy of the database in Cloudflare R2 (Eastern Europe region), kept for 30 days and then removed.
- Push notifications: delivered through Expo's push service and then Apple or Google. Only the device token and the notification text pass through them.
Sharing
If you share a workspace, the people you invite see everything in that workspace: all entries, no matter who added them, and the names and email addresses of its members. Your personal workspace stays yours unless you invite someone. We do not share data with anyone else, and we do not sell it. The providers above process data on our behalf and under their own data-processing terms.
Deleting your account
In the app, go to Settings and choose Delete account. This is immediate and final: your sign-in, settings, device tokens and every workspace where you are the only member are deleted, with all entries in them. In shared workspaces your entries stay with the other members, without your name or email attached. Backups age out within 30 days. You can also email us at support@suninnova.com from the address on your account and we will do the same.
Your rights
You can see and change everything in the app itself. If you want a copy of your data in a machine-readable form, or want it corrected or deleted and cannot do it in the app, write to support@suninnova.com. If you are in the European Union, you also have the rights set out in the GDPR, including the right to complain to your local supervisory authority.
Children
Outlay is not directed at children under 16 and we do not knowingly collect their data.
Changes
When this policy changes, the date at the top changes with it and the current version is always at this address. For changes that matter we will tell you in the app.
Contact
Sun Innova (Uroš Šunjevarić PR), Serbia · support@suninnova.com. See also the terms of use.