Privacy Policy

Subdek helps you track your subscriptions by detecting them from your Gmail and from SMS messages — either ones you choose to share with the app, or (on Android, if you grant SMS permission) automatically from bank and payment alerts — and shows you what you're paying, when you'll be charged next, and why we think a charge is a subscription.

Account information. When you sign in with Google, we receive your name, email address, and a unique Google account identifier. We use this to create and identify your Subdek account. We do not receive your Google password.

Gmail data (only if you connect it). Subdek requests read-only access to Gmail (Google's gmail.readonly scope). We need this because Subdek's core function is finding subscription, billing, renewal, cancellation, and payment-related emails and turning them into the subscription list, spend totals, and renewal reminders you see in the app — without reading Gmail, Subdek can't do this. We access Gmail only after you choose to connect it, and Gmail data is used only to provide this subscription-detection functionality and directly related functionality (reconciliation — re-checking existing detections against improved detection rules over time — and troubleshooting a sync issue) — never for advertising, and never for any purpose unrelated to the subscription-tracking features you signed up for. For reliable detection, matching Gmail messages may be retrieved and processed with their full message content, including headers and body content, not just a short preview snippet — a snippet alone is frequently too short to reach the actual charged amount in a real receipt. We do not store the full body of any email or retain a copy of your Gmail inbox: message content is processed to extract subscription information, and only a limited excerpt (up to 2,000 characters), encrypted, may be retained as evidence for why a subscription was detected. We also retain a message identifier (not message content) to avoid reprocessing the same email and to support reconciliation. This data is never sold and never used to train AI models. In a narrow, currently-inactive fallback case — only for a message that already matched clear subscription/billing signals but whose exact charged amount our own rules couldn't extract — a portion of that message's text may be sent to a third-party AI service (Groq) solely to extract a number; this never decides whether something is a subscription, and is not enabled in Subdek's current production configuration. The stored evidence excerpt is encrypted and is not currently surfaced to you, to other users, or to our support team through the app — you see the evidence type (e.g. "renewal email") that explains why a charge was flagged, not the excerpt text itself.

SMS data. You can share or paste a specific text message into the app (for example, a bank debit alert) and we process only that message to detect a subscription. On Android, you can instead grant SMS permission so Subdek automatically scans incoming and existing text messages for subscription/bill payment alerts — we filter for messages that look like transaction alerts from banks or payment services (based on the sender and message content) before sending anything to our servers; personal messages that don't match are never transmitted. This permission is optional, requested with an explanation before the system prompt, and can be turned off anytime in Settings.

Subscription and billing data we derive. Once detected (or manually entered by you), we store the merchant, amount, currency, billing frequency, renewal date, and payment history you see in the app. This is the core data the product exists to show you.

Usage/analytics data. We collect basic product-usage events (e.g. which screens you open, whether a sync succeeded) to understand how the app is used and to fix problems. We do not sell this data. If you delete your account, these events are anonymized (disconnected from your identity) rather than deleted outright, so we can still measure overall product usage without it being tied to you.

• We do not sell your data to third parties.
• We do not use Gmail or SMS data for advertising, and do not build advertising profiles from it.
• We do not store full email bodies or retain a copy of your entire Gmail inbox. Gmail message content is processed only as needed for subscription detection and reconciliation.
• If SMS permission is granted, we only ever transmit messages that look like transaction alerts (filtered by sender and content on your device first) — we do not upload your full SMS inbox or any personal/conversational messages.
• We do not use your data to train AI models. Subscription detection itself is deterministic (rule-based) — a narrow, currently-inactive fallback may send limited message text to a third-party AI service (Groq) solely to extract a charged amount our own rules couldn't find, never to train a model and never to decide whether something is a subscription.

Access is limited to what's needed to operate the product:

• You see your own subscriptions, evidence types (e.g. "renewal email"), and billing history — never the raw encrypted excerpt itself through the ordinary app.
• A small number of authorized support/admin staff can see account status, connection/sync status, and subscription metadata to help you if something goes wrong — never your raw Gmail content, SMS text, or account credentials. Every admin action is logged.
• Service providers we use to operate Subdek (e.g. our email-delivery provider for renewal reminders, our cloud hosting provider) process data only as needed to provide that service, under their own confidentiality obligations.

OAuth tokens and stored message excerpts are encrypted at rest. We use industry-standard access controls to limit who can query production data. No system is perfectly secure, and we can't guarantee absolute security, but we design around minimizing what we collect and encrypting what we must retain.

• Access: you can see all your subscription data in the app at any time.
• Correction: you can edit or mark any detected subscription as incorrect directly in the app.
• Deletion: you can permanently delete your account from Settings. This revokes our access to any connected accounts, deletes your subscriptions, billing history, and stored evidence, and anonymizes (rather than retains) your usage analytics.
• Disconnecting Gmail: you can disconnect Gmail access at any time from Settings without deleting your account; this also deletes the stored access credentials.

We retain your subscription and account data for as long as your account is active. If you delete your account, deletion happens immediately: Gmail tokens are revoked with Google and deleted, and your subscriptions, billing history, and stored evidence are deleted from our production database as part of that same request — this isn't a scheduled or delayed process. Usage-analytics events are anonymized (identifiers removed) rather than deleted outright, so we can still measure overall product usage without it being tied to you. We don't currently make a specific claim about how long a deleted account's data might persist in infrastructure-level backups (e.g. database snapshots) after that point.

We'll update the "Last updated" date above when this policy changes, and will make reasonable efforts to notify you of material changes.

Questions about this policy or your data: reminders@subdek.com