Privacy policy
Effective 4 September 2026. Applies to sommary.ai and the Sommary iOS app, operated by Sommary.
Sommary is a tool restaurants use to run a beverage programme: inventory, costs, prices, purchasing and the printed list. It is built for a business and its staff, not for consumers. This page says what we collect, what we do with it, who else touches it, how long we keep it, and how to have it deleted.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account: email address, name, a password hash | Typed at sign-up, or entered by the business owner who invites you | To sign you in. Passwords are stored only as a salted scrypt hash. |
| Device sessions: a device label, when the device was last seen, when it expires | The label is the device's model name as reported by the operating system, set when a phone or tablet signs in | So an owner can see which devices are signed in and revoke one. The session token itself is never stored, only its hash. |
| Business data: wines, quantities, costs, prices, wine-list entries, purchase orders, counts, vendor names and the contact details typed into a purchase order | Entered by the business's staff | It is the product. The business owns it. |
| Invoice photographs and PDFs | Photographed or uploaded by staff | To read the delivery off the invoice. An invoice may show the vendor's and the restaurant's names and addresses. |
| Point-of-sale data: menu buttons and stock levels | Toast, only when a business connects its own Toast account | To keep the POS's "in stock" honest. |
| Server logs: IP address, request path, timestamp, browser or app version | Every request, automatically | To keep the service running and to investigate abuse or faults. |
| Crash reports from the iOS app | Apple, only if you have opted in to sharing them on your device | To fix crashes. They contain no account data. |
We do not run analytics or advertising trackers on the website or in the app, we do not sell data, and we do not build profiles of people. Which staff member counted a shelf is recorded as the device, not the person.
Who else processes it
| Provider | What they see | Why |
|---|---|---|
| Vultr (hosting) | Everything above, encrypted at rest on their virtual machine in the United States | The server runs there. |
| Google (Gemini API) | Invoice photographs and PDFs, at the moment they are read | To turn a photographed invoice into lines. Sent under Google's API data-processing terms; not used for anything else by us. |
| Toast | Menu items and stock levels, in both directions | Only if the business connects its Toast account, using that business's own credentials. |
| Apple | App distribution; crash reports if you opted in | The App Store and TestFlight. |
| Let's Encrypt | The domain name only | TLS certificates. |
How long we keep it
- Account and device sessions: while the account exists. Revoked sessions stay visible in the device list until they expire.
- Business data: while the business has an account. It belongs to the business; deleting one person's account does not delete the restaurant's inventory.
- Invoice photographs: while the business keeps the delivery they belong to.
- Server logs: 90 days.
- Write-replay store (the copies of recent requests that let a phone with no signal replay them safely): 7 days.
- Database snapshots taken before software upgrades: up to 90 days.
Your rights, and deleting your account
You can ask to see the data we hold about you, to correct it, or to delete your account. Email support@sommary.ai from the address on the account. We confirm within 7 days and complete deletion within 30 days. Deleting an account revokes every device session, removes the name and email address, and detaches the account from any business. The business's own records are kept for the business; an owner who wants the whole business deleted asks for that in the same email.
The app can also send a deletion request directly from Settings, where that build offers it. It is the same request and follows the same timeline.
If you are in the European Economic Area or the United Kingdom, Sommary is the controller for account data and a processor for the business data a restaurant enters, and you also have the right to complain to your supervisory authority.
Security
Everything travels over TLS. Passwords are hashed with scrypt; session tokens are stored only as SHA-256 hashes. Device sessions can be revoked from any other signed-in device. A restaurant's data is isolated by business on every query.
Children
Sommary is for restaurant staff and is not directed at anyone under 18.
Changes
When this page changes we update the effective date at the top. Material changes are announced to account owners by email.
Contact
Sommary · support@sommary.ai