Subscript Privacy Policy

Last updated: July 8, 2026

The short version: Subscript is built local-first. Your emails are scanned and parsed entirely on your phone. Their content is never sent to our servers or anyone else's. We show no ads, use no third-party analytics or trackers, and never sell your data.

Who we are

Subscript is a subscription-tracking app for Android, built and operated by a small independent team. Questions about this policy or your data can be sent to psyduck.dev101@gmail.com.

What stays on your device

Subscript works without an account. Everything the app needs lives in a local database on your phone:

Your subscription list and its history (price changes, cancellations, renewals).
Your notification and app preferences.
If you connect Gmail: your Google access tokens, stored only in your device's encrypted secure storage (Android Keystore). They are never written to our servers.

Uninstalling the app deletes all of this local data.

How Gmail scanning works

If you choose to connect a Gmail account, Subscript requests read-only access (gmail.readonly). The app searches for subscription-related receipts and downloads matching messages directly from Google to your phone, where they are parsed on-device to detect subscription names, prices, billing cycles, and renewal dates.

Email content is processed only on your device and is discarded after parsing. It is never transmitted to, stored on, or readable by our servers. We could not read your email even if we wanted to.
Connecting Gmail is optional; you can add and track subscriptions manually instead.
You can disconnect at any time in Settings, which deletes the stored tokens from your device. You can also revoke Subscript's access from your Google Account permissions page.

Subscript's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect (only if you create an account)

Creating an account is optional and exists so your subscription list can survive a lost or upgraded phone. If you sign up, the following syncs to our backend (hosted on Supabase):

Account details: your email address, an optional display name, and your chosen home currency.
Subscription records: service name, price, currency, billing cycle, renewal date, category, and status (plus their change history). These are the same entries you see in the app. This is derived metadata; it never includes email content.
Connected inbox reference: the address of the Gmail account you connected and whether the connection is active, so the app knows what is linked.

Server-side data is protected by row-level security: each account can only ever read its own rows.

What we don't do

No advertising, and no ad SDKs in the app.
No third-party analytics, tracking, or crash-reporting SDKs.
No selling, renting, or trading of your data. Not to anyone, ever.
No human access to your email content: it never reaches us.

Service providers

We rely on two providers to run Subscript, and only for the purposes described above:

Supabase: database and authentication hosting for optional accounts.
Google: sign-in with Google and the Gmail API, if you choose to use them.

We may disclose information if required to do so by law.

Notifications

Renewal reminders, trial alerts, price-change alerts, and post-cancellation alerts are scheduled locally on your device. No notification data leaves your phone.

Security

All network traffic uses HTTPS/TLS. Google tokens live only in Android's encrypted secure storage. Server data is scoped per-account with row-level security.

Data retention and deletion

You can delete your Subscript data at any time, without contacting us:

Delete your whole account: open the Subscript app → Settings → Danger zone → Delete account. This immediately and permanently removes everything we hold on our servers: your account email, display name, home currency, connected-inbox reference, and all subscription records and their history. Nothing is retained after deletion; there is no additional retention period.
Delete individual data without deleting your account: open any subscription → Remove from history to permanently erase that subscription and its events from both your device and our servers.
Disconnect Gmail in Settings to delete the stored access tokens from your device at any time.
Uninstall the app to remove all local data from your phone.

We keep synced data only for as long as your account exists. If you use Subscript without an account, we hold nothing about you at all: everything lives on your device.

Children

Subscript is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If our practices change, we will update this page and the date at the top. Material changes will also be announced in the app.