Privacy and Safety
SUMUP is a small, self-contained app. What you type stays on your Mac, it asks for no special permissions, and you can check that your download is exactly the file we published.
Last updated 18 October 2026.
Why macOS Asks Before Opening SUMUP
Apple offers notarisation, an automated check of apps that are distributed outside the App Store. SUMUP isn't notarised yet, so the first time you open it, macOS asks you to confirm. Open System Settings, go to Privacy and Security, and choose Open Anyway.
The warning means Apple hasn't reviewed this build. It doesn't mean anything was found wrong with it. If you'd like to be sure your copy is genuine, check it as shown below.
Check Your Download
Every release has a unique fingerprint (a SHA-256 checksum). If your download matches it, it is exactly the file we published.
- Fingerprint for SUMUP 2.0:
dff4d278d6f3f8ed25e73548987d56a8458a9884006718e00beb5f05cded5df3 - To check it, open Terminal and run the line below, then compare the result with the fingerprint above:
shasum -a 256 ~/Downloads/SUMUP-2.0.dmg
What SUMUP Does and Doesn't Do
- Asks for no special permissions. No access to your camera, microphone, contacts, location or photos, and it doesn't need Accessibility or screen recording.
- Runs only while it's open. No login items, no background helpers, nothing left running after you quit.
- Keeps to its own folder. Each Sheet is a plain text file in
~/Library/Application Support/SumUp, and your settings are stored with your other macOS preferences. Nothing is uploaded or synced. - Uses the clipboard only when you copy.
- Is built with Apple's Hardened Runtime, a macOS protection that limits what an app's code can be made to do.
- Is easy to remove. Drag SUMUP from Applications to the Trash. To remove your Sheets too, delete the SumUp folder above.
Your Data in SUMUP
- No account and no tracking. SUMUP has no sign in, no analytics and no advertising, and it does not collect information about how you use it.
- Exchange rates are the only network requests. To convert currencies and crypto, SUMUP asks public rate services for current prices against the US dollar: Coinbase and open.er-api.com for currencies, and CoinGecko and Coinbase for crypto. These requests never include anything you type. Like any web request, they show those services your IP address. The rates are saved on your Mac so conversions keep working offline.
- Everything else works offline. Calculations, units, dates and time zones never leave your Mac.
Changes
If this page changes, the new version will be posted here with a new date. If a future app needs to handle your data differently, its page will say so clearly before you download it.