Privacy Policy

1. Information you provide

We collect the information you give us when you create an account and use the Service:

• Account details: your name, email address, and password (stored only in hashed form).
• Content you add: subscriptions (names, amounts, currencies, billing cycles, dates, notes), categories, and payment-method labels — for example a name and a type such as “card”. We never collect card numbers or bank credentials, and we do not process payments.
• Teams: team names and the email addresses you use to invite members.

2. Information collected automatically

• Push notification token and platform (iOS/Android) — only if you enable push notifications.
• Your time zone — used to deliver reminders at an appropriate local time.
• Usage analytics via a privacy-focused, self-hosted tool (Umami). We record in-app events and may associate them with your account to understand how features are used. We do not use third-party advertising or cross-site tracking.
• Technical data such as IP address and basic request information, processed by our servers for security and reliability.

3. How we use your information

• Provide, operate, and maintain the Service.
• Send the payment reminders and weekly summaries you enable.
• Send essential account emails, such as password resets and team invitations.
• Maintain security, prevent abuse, and diagnose problems.
• Improve and develop the Service.

4. Sharing within a team

If you create or join a team, the subscriptions and related data in that team are visible to all of its members. Invitations are delivered to the email address you specify.

5. Service providers

We share data only with providers that help us operate the Service, and only as needed. We do not sell your personal information. These providers include:

• Hosting and database providers.
• An email delivery provider (for reminders and account emails).
• Push notification gateways — Apple Push Notification service and Google/Firebase Cloud Messaging (via Expo).
• Self-hosted analytics.

6. Data retention

We keep your information while your account is active. When you delete your account, we delete your personal data within a reasonable period, except where we must keep it to comply with legal obligations.

7. Security

We protect your data with measures including password hashing (bcrypt) and encryption in transit (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit your data in the app and delete your account in Settings, or contact us for help. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection authority.

9. International transfers

Your data may be processed and stored in countries other than the one where you live. Where required, we take steps to ensure an adequate level of protection.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide a more prominent notice.

12. Contact

If you have questions about this policy or your data, contact us at [email protected].

Operator: Subscree, Kyiv / Ukraine.