Privacy Policy

What we store

• Account details: your email address, the name you choose, and your password (stored only as a secure hash by our authentication provider). If you turn on two-factor authentication, its setup data.
• Subscription details you enter: service names, plans, prices, billing cycles, dates, statuses, the account email or username you note for each service, payment-method labels (such as “Visa ending 4242”, never full card numbers), cancellation notes and other notes.
• Activity in SubKeeper: renewal and cancellation steps you record, status history, confirmation numbers, and any evidence files you upload (for example a cancellation confirmation screenshot).
• Sharing: if you share a subscription, the email address of the person you invite and what they can see.
• Notifications and an activity log of important account actions (such as subscription changes, renewal and cancellation steps, invitations and data exports).
• Vault: the password vault is currently turned off, so SubKeeper does not store service passwords.
• Technical data: our hosting providers keep standard request logs (such as IP address, browser type and time) for security and troubleshooting.

We don't ask for, and you shouldn't enter, full card numbers, security codes, bank PINs or one-time payment codes.

How we use it

• To run the service: show your dashboard, calendar and insights, and track renewal and cancellation steps.
• To send emails you need or asked for: sign-in and password emails, invitations, and renewal reminders (you can turn reminders off any time in Settings or with the unsubscribe link).
• To keep the service secure and fix problems.

We don't sell your data, show ads, or use advertising or analytics trackers.

Who processes your data

We use these service providers to run SubKeeper. They process data on our behalf:

• Supabase: database, sign-in and file storage (hosted in the United States, AWS us-east-1).
• Vercel: website hosting.
• Resend: sending emails.
• AI features are currently turned off. If they are turned on later, this policy will be updated before any data is sent to an AI provider.

Cookies and local storage

SubKeeper uses only essential cookies to keep you signed in, and your browser's local storage for small preferences. No advertising or tracking cookies.

Your choices and rights

• Download your data: Settings → Your data → Download my data.
• Delete your account: Settings → Your data → Delete my account. This removes your account and data from our database straight away; copies in our providers' logs or backups expire on their normal schedule.
• Correct your data: edit it directly in the app.
• Email reminders: turn them off in Settings or use the unsubscribe link in any reminder.

For anything else, or to exercise rights you have under your local law, contact hello@mysubkeeper.com.

How long we keep data

We keep your data while your account exists. When you delete your account, we delete it from our database immediately.

Security

Data is sent over encrypted connections, access to it is restricted per user at the database level, and you can turn on two-factor authentication in Settings. No system is perfectly secure; please use a strong, unique password.

Children

SubKeeper is not intended for anyone under 16.

Changes

If we change this policy, we'll update the date above, and for significant changes we'll let you know by email or in the app.