Privacy Policy

Subdek helps you track your subscriptions by detecting them from your Gmail and from SMS messages you choose to share with the app, and shows you what you're paying, when you'll be charged next, and why we think a charge is a subscription.

Account information. When you sign in with Google, we receive your name, email address, and a unique Google account identifier. We use this to create and identify your Subdek account. We do not receive your Google password.

Gmail data (only if you connect it). If you choose to connect Gmail, we read message headers and a short preview snippet (sender, subject, date, and the first part of the message body) for emails matching subscription/payment-related keywords — we do not read your full inbox or full email bodies. We use this only to detect and describe your subscriptions. A short excerpt (a few hundred characters) may be stored, encrypted, as evidence for why we detected a subscription — this is never shown to other users or sold to anyone, and is only used to let you (or, for support purposes, a limited support team member) see why a charge was flagged.

SMS data (only if you share/paste it). Subdek does not read your phone's SMS inbox and does not request that permission. If you choose to share or paste a text message into the app (for example, a bank debit alert), we process that specific message to detect a subscription. We do not have access to any other messages on your device.

Subscription and billing data we derive. Once detected (or manually entered by you), we store the merchant, amount, currency, billing frequency, renewal date, and payment history you see in the app. This is the core data the product exists to show you.

Usage/analytics data. We collect basic product-usage events (e.g. which screens you open, whether a sync succeeded) to understand how the app is used and to fix problems. We do not sell this data. If you delete your account, these events are anonymized (disconnected from your identity) rather than deleted outright, so we can still measure overall product usage without it being tied to you.

• We do not sell your data to third parties.
• We do not read or store your full email inbox or full email bodies.
• We do not request or use SMS inbox-reading permissions.
• We do not use your data to train third-party AI models. Subscription detection in this version of Subdek is deterministic (rule-based), not AI-based.

Access is limited to what's needed to operate the product:

• You see your own subscriptions, evidence types (e.g. "renewal email"), and billing history — never the raw encrypted excerpt itself through the ordinary app.
• A small number of authorized support/admin staff can see account status, connection/sync status, and subscription metadata to help you if something goes wrong — never your raw Gmail content, SMS text, or account credentials. Every admin action is logged.
• Service providers we use to operate Subdek (e.g. our email-delivery provider for renewal reminders, our cloud hosting provider) process data only as needed to provide that service, under their own confidentiality obligations.

OAuth tokens and stored message excerpts are encrypted at rest. We use industry-standard access controls to limit who can query production data. No system is perfectly secure, and we can't guarantee absolute security, but we design around minimizing what we collect and encrypting what we must retain.

• Access: you can see all your subscription data in the app at any time.
• Correction: you can edit or mark any detected subscription as incorrect directly in the app.
• Deletion: you can permanently delete your account from Settings. This revokes our access to any connected accounts, deletes your subscriptions, billing history, and stored evidence, and anonymizes (rather than retains) your usage analytics.
• Disconnecting Gmail: you can disconnect Gmail access at any time from Settings without deleting your account; this also deletes the stored access credentials.

We retain your subscription and account data for as long as your account is active. If you delete your account, associated data is deleted per the Deletion section above, typically within 30 days to account for backup rotation.

We'll update the "Last updated" date above when this policy changes, and will make reasonable efforts to notify you of material changes.

Questions about this policy or your data: reminders@subdek.com