Privacy policy

Overview

This policy explains how PONSUM, the tax and portfolio software at ponsum.app, handles information when you use the website, the app at ponsum.app/app and the verify page. PONSUM is designed to need as little information as possible, and most of what you add never leaves your browser.

In short:

• There are no accounts. PONSUM does not ask for your name, email address or a password.
• Your workspace is stored in your own browser, not on PONSUM servers.
• To read the chain, wallet addresses and transaction hashes you add are sent in read requests through the PONSUM proxy.
• The hosting provider keeps standard request logs.
• Transactions you sign on Robinhood Chain, such as buying a plan or anchoring a report, are public and permanent.

Information you add

When you use the app you may add wallet addresses, labels, transaction hashes, manual transactions, notes, prices, category changes and settings such as your country and cost basis method. All of this is stored in your browser, as described below.

To import activity, the app sends read requests to Robinhood Chain for the addresses and transaction hashes you add, for example to fetch token transfers, receipts, blocks and balances. Those requests pass through the PONSUM proxy at ponsum.app/api/rpc, which forwards them to the public Robinhood Chain RPC endpoint and returns the answer. The proxy only allows read methods and does not store request contents, but the hosting provider's logs for the function may record that a request was made.

If you contact PONSUM through a direct message on X, that conversation is handled by X under its own terms and privacy policy.

Information stored on your device

PONSUM uses your browser's storage so the app works without an account:

• IndexedDB. A database named ponsum holds your workspace: wallets and labels, sync progress, cached chain data and prices, and any overrides, notes or manual transactions.
• localStorage. A few small entries remember your country, whether you dismissed the announcement bar, which wallet you connected last and similar preferences.

This data stays on your device until you remove it. You can export your workspace as a file, clear it in Settings, or clear site data in your browser. PONSUM does not set cookies for analytics or advertising, and the site does not load analytics or advertising scripts.

Hosting and logs

The website and the proxy are hosted on Vercel. When your browser requests a page, a file or the proxy, Vercel processes technical information needed to deliver it, such as your IP address, browser user agent, the requested address, the referring page and the time. Vercel keeps these logs for a limited period under its own policies. PONSUM uses them only to keep the site running, to fix errors and to prevent abuse of the proxy.

Fonts and images are served from ponsum.app itself, so loading a page does not send requests to font or image services run by others.

Wallets and signatures

Connecting a wallet is optional. If you connect one, your wallet software shares your address with the site and shows you any transaction or signature PONSUM asks for, so you can approve or reject it. PONSUM never receives your private keys or seed phrase. Your wallet is a separate product, and its provider handles information under its own policy.

Public blockchain data

Robinhood Chain is a public blockchain. Balances, transfers and transactions of any address can be read by anyone, and PONSUM reads that public data on your behalf. PONSUM does not control the chain and cannot change or delete anything recorded on it.

Some features create new public records when you choose to use them:

• Buying a plan records the workspace address, the paying address, the tier, the amount and the expiry date.
• Linking a wallet records that the wallet belongs to the workspace.
• Granting an accountant access records the workspace and the accountant's address.
• Anchoring a report records the report ID, the workspace, the tax year, a country code, the cost basis method, the transaction count, a hash of the report's wallet addresses and which address anchored it.

These records are public and permanent. Nobody, including PONSUM, can remove them. Report figures are not written to the chain, but an anchor links a report ID and its tax year and country to your workspace address, so think before you anchor.

Third parties

Besides Vercel and the Robinhood Chain RPC endpoint described above, the site links to services run by others, such as X, the Robinhood Chain block explorer, wallet apps and ponsfamily. When you follow one of those links, that service's own terms and privacy policy apply.

How information is used

PONSUM uses information only to provide the site and the app, to read the chain for you, to keep the service secure and working, and to answer messages you send. PONSUM does not sell information, does not build advertising profiles and does not share your workspace with anyone, because it never receives your workspace in the first place.

How long information is kept

Browser data stays until you clear it. Hosting logs are kept for the limited period set by the hosting provider. Onchain records are permanent by the nature of the blockchain.

Your choices and rights

You can use PONSUM without connecting a wallet, export or delete your workspace at any time, and choose not to buy plans, link wallets, grant access or anchor reports. Depending on where you live, privacy laws may give you rights such as access to or deletion of personal data. Because PONSUM has no accounts and keeps your workspace on your device, most of that data is already under your control. For questions about hosting logs, send a direct message to @ponsumapp on X. Records on Robinhood Chain cannot be changed or deleted by anyone.

Children

PONSUM is not intended for children, and it is not designed to collect information about them.

Changes to this policy

If PONSUM changes how it handles information, this page will be updated and the effective date above will change. Please check it from time to time.

Contact

Questions about this policy can be sent as a direct message to @ponsumapp on X. See also the terms of service and the security page.