Privacy Policy

Definitions

Data We Collect

Data you provide directly

• Email address — only if you create an optional account for cloud sync.
• Subscription data — service names, amounts, billing dates you enter manually. Stored locally on your device by default; synced to our encrypted cloud only if you opt in.
• Feedback & support messages — content you submit via in-app support or email.

Data collected automatically

• Device information — device model, OS version, app version, language.
• Crash reports & diagnostics — anonymized error logs to help us fix bugs.
• Usage analytics — anonymized feature usage to understand how the app is used (e.g. which screens are visited). No personally identifiable data is included.

Data we do NOT collect

• Bank account or credit card credentials
• Financial transaction history
• Precise location data
• Contacts or address book

How We Use Your Data

We use the data we collect only for the following purposes:

• To provide and improve the SubPlus app and its features.
• To manage your account and enable cloud sync across your devices (if you opt in).
• To respond to support requests and feedback you send us.
• To send transactional emails (e.g. account confirmation, password reset) — never marketing without your explicit consent.
• To analyze anonymized usage patterns and fix bugs.
• To comply with legal obligations under BC PIPA, PIPEDA, or other applicable laws.

We will never use your data for purposes materially different from those listed above without updating this policy and, where required, obtaining your consent.

Sharing & Disclosure

We do not sell your personal data. We do not share it with advertisers or data brokers.

When we may share data

• Service Providers — Trusted third parties who help us operate the app (e.g. crash reporting, cloud storage). They are contractually prohibited from using your data for any purpose other than providing services to us.
• Legal requirements — We may disclose data if required by law, court order, or a valid request from Canadian authorities.
• Business transfers — In the event of a merger or acquisition, we will notify you before your data is transferred and give you the opportunity to delete your account.
• With your consent — For any other purpose, only with your explicit permission.

Gmail Import Feature

SubPlus offers an optional Gmail Import feature that detects subscriptions from your inbox. This feature is opt-in only and requires your explicit authorization through Google's secure OAuth sign-in. Coming Soon

SubPlus's use of Google API data adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

• Local data — Stays on your device until you delete the app or clear it manually.
• Cloud sync data — Retained while your account is active. Deleted within 30 days of account deletion.
• Support correspondence — Retained for up to 2 years for quality and legal purposes.
• Anonymized analytics — May be retained indefinitely as they contain no personally identifiable information.

You can request deletion of your personal data at any time by contacting us at privacy@subplus.app or deleting your account in Settings.

Account & Data Deletion

How to delete your account in the app

You can delete your SubPlus account at any time directly from the app — no email required:

1. Open SubPlus and go to Settings
2. Tap Profile
3. Scroll to the bottom and tap Delete Account
4. Confirm when prompted

Account deletion is permanent and cannot be undone. All cloud data associated with your account is permanently deleted from our servers within 30 days.

What gets deleted

• Cloud-synced subscription data — permanently removed from our servers within 30 days of deletion.
• Your email address and account credentials — removed from Firebase Authentication immediately upon deletion.
• Cloud backup data — all backups linked to your account are deleted within 30 days.
• Support history — may be retained for up to 2 years as required by applicable law.
• Anonymized analytics — retained as they contain no personally identifiable information and cannot be linked back to you.

Local data on your device

Subscription data stored locally on your device (when cloud sync is disabled) is not removed by account deletion. To remove it completely, uninstall SubPlus from your device or clear the app's data via your device settings (Settings → Apps → SubPlus → Clear Data on Android; delete and reinstall on iOS).

Request deletion by email

If you cannot access the app, you can request deletion of your account and all associated data by emailing privacy@subplus.app with the subject line "Delete My Account". Please include the email address associated with your account. We will process your request within 30 days and send a confirmation once complete.

Security

We take reasonable technical and organizational measures to protect your personal data, including:

• End-to-end encryption for cloud-synced data
• Platform-native encryption (iOS Keychain, Android Keystore) for locally stored sensitive tokens
• HTTPS/TLS for all data in transit
• Access controls limiting who at SubPlus can access user data

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to using industry-standard practices and will notify you promptly in the event of a data breach affecting your information, as required under PIPEDA's breach reporting obligations.

Your Privacy Rights

Under BC PIPA and PIPEDA, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@subplus.app. We will respond within 30 days as required by PIPEDA.

Children's Privacy

SubPlus is not intended for use by anyone under the age of 19 (the age of majority in British Columbia). We do not knowingly collect personal information from minors.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@subplus.app and we will promptly delete it.

Third-Party Links

The app may contain links to third-party websites or services (e.g. App Store, Google Play). We are not responsible for the privacy practices of those services and encourage you to review their privacy policies before providing any personal information.

Analytics & Advertising

Analytics

We use Firebase (Google Inc.) for anonymized crash reporting and app analytics. Firebase collects device identifiers and usage patterns. You can opt out via your device's advertising settings:

• iOS: Settings → Privacy → Tracking → disable "Allow Apps to Request to Track"
• Android: Settings → Google → Ads → "Opt out of Ads Personalization"

For more information, see Google's Privacy Policy.

Advertising

The free version of SubPlus may display ads served by Google AdMob. When you consent to personalized advertising, Google may use your data as described in their Privacy & Terms. You can opt out of personalized ads at any time through your device settings.

Payments

All in-app purchases are processed by the Apple App Store or Google Play. SubPlus never stores or processes payment card details. Payment handling is governed by the respective store's privacy policy.

International Users

SubPlus is operated from Vancouver, BC, Canada and is governed primarily by BC PIPA and PIPEDA. However, we welcome users from around the world and respect applicable privacy laws in your jurisdiction.

European Union (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local Data Protection Authority (DPA).

Our legal basis for processing your data is primarily consent and legitimate interest (improving the app, providing the service). We use Firebase (Google LLC), which is GDPR-compliant and certified under the EU-US Data Privacy Framework. Firebase acts as a Data Processor on our behalf under a Data Processing Agreement.

California (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, correct, delete, and opt out of the sale of personal information.

We do not sell your personal information. We use Firebase for analytics and AdMob for advertising — both Google services that comply with CCPA requirements. You can opt out of personalized advertising at any time via your device settings (Android: Opt out of Ads Personalization; iOS: Limit Ad Tracking).

To exercise your California privacy rights, contact us at privacy@subplus.app.

Firebase & Google Compliance

SubPlus uses Firebase (Google LLC) for cloud storage, analytics, and crash reporting. Firebase is compliant with GDPR, CCPA, PIPEDA, and other major privacy frameworks. Google acts as a data processor under our agreement. For details, see Firebase Privacy & Security.

Data Transfers

Your data may be processed on servers located outside your country of residence (including the United States, where Google's infrastructure operates). Firebase uses Standard Contractual Clauses (SCCs) and other approved transfer mechanisms to ensure your data remains protected regardless of where it is processed.

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email and/or a prominent notice in the app at least 30 days before the change takes effect.

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of SubPlus after changes take effect constitutes acceptance of the updated policy.