App: SubTrack – Family Sub Tracker | Last updated: April 6, 2026
This Privacy Policy explains how SubTrack ("we", "us", or "our") collects, uses, and protects information when you use the SubTrack iOS application. We are committed to keeping your data private and secure.
1. Information We Collect
Information you provide
Account information: Your email address and display name, collected at sign-up via AWS Cognito.
Household data: Household name, member names, and roles you enter within the app.
Subscription data: Subscription names, amounts, billing cycles, renewal dates, categories, notes, and tags you manually enter or confirm from automated suggestions.
Information collected automatically
Gmail email metadata (optional): If you choose to connect a Gmail account, SubTrack reads email headers (sender address, subject line, date) and billing-related email body content from subscription receipt, renewal, and billing notification emails only. This data is processed on-device to detect subscription patterns and is never transmitted to our servers or stored persistently.
Analytics events: Anonymous in-app events (e.g., screens viewed, features used) stored locally on your device. No personally identifiable information is attached to these events, and they are never transmitted off-device.
Information we do NOT collect
Bank account numbers, card numbers, or financial credentials
Full email message bodies stored on our servers
Location data
Contacts or address book data
Device identifiers for advertising purposes
2. How We Use Your Information
To create and manage your SubTrack account
To sync your subscription and household data across sign-in sessions
To detect subscriptions from connected Gmail accounts (on-device processing only)
To send renewal and trial expiration notifications you have opted into
To provide customer support when you contact us
3. Data Storage and Security
Your subscription and household data is stored on our servers (AWS) and on your device. Authentication tokens are stored in your device's secure Keychain. We use industry-standard encryption in transit (TLS) and at rest.
Gmail OAuth tokens are stored in your device's Keychain only and are never transmitted to our servers. Email content is processed entirely on-device.
4. Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.
We use the following third-party services:
AWS Cognito – authentication and user account management
Google Gmail API – read-only access to billing emails (optional, user-initiated)
These services have their own privacy policies. We share only the minimum data necessary for each service to function.
5. Gmail API Disclosure
SubTrack's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
Gmail data is used solely to detect and suggest subscriptions to the user
Gmail data is not transferred to third parties
Gmail data is not used for advertising
Gmail data is not used for any purpose beyond the feature the user explicitly enables
Humans do not read your Gmail data
6. Children's Privacy
SubTrack is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
7. Your Rights and Choices
Access and correction: You can view and edit your subscription and household data at any time within the app.
Delete your account: You can permanently delete your account and all associated data from Settings → Account → Delete Account. This action is irreversible.
Disconnect Gmail: You can revoke Gmail access at any time from Settings → Automation → Manage Integrations.
Notifications: You can disable notifications at any time from Settings → Notifications or from your device's Settings app.
8. Data Retention
Your data is retained as long as your account is active. When you delete your account, all server-side data is permanently deleted. Local device data is removed when you uninstall the app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of SubTrack after changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at: privacy@subtrack.app