SubSentry

Legal

Privacy Policy

How SubSentry collects, uses, stores and deletes your information, including Gmail data.

Last updated: October 22, 2026

SubSentry (“we”, “us”) is operated by Amer Kadric. If you have questions about this policy, email [email protected].

What SubSentry does

SubSentry helps you find and manage recurring subscriptions. With your permission, it searches your Gmail for billing-related emails and turns them into a list of subscriptions for you to review.

Information we collect

  • Account information: your email address (or Apple private relay address) and, if you share it, your name. We use it to create and secure your account.
  • Gmail data (only if you connect Gmail): we request read-only access to Gmail (the gmail.readonly permission) and keep the address of the Gmail account you connect, so you can see and disconnect it. Our servers search for and read messages that match billing searches, such as receipts, invoices, renewals, trial and cancellation notices. From those messages we extract the service name, plan, price, currency, billing dates and the sender’s domain. We store those extracted details and the Gmail message ID they came from. We do not store full email contents. Messages that don’t match billing searches are not opened. SubSentry never sends, deletes, or changes your email.
  • Subscription data you enter or edit, notes, and preferences.
  • Purchase status of SubSentry Pro, provided by Apple through RevenueCat. We never see your payment card details.
  • Device push token, if you turn on notifications.
  • Diagnostic logs, which exclude email content and credentials.

How we use information

Only to provide SubSentry’s features: detecting subscriptions, showing your spending, sending the reminders you choose, and keeping your account secure. Subscription detection is done by fixed rules on our servers; no AI model reads your email.

Google user data and Limited Use

SubSentry’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

  • use Gmail data only to provide and improve SubSentry’s user-facing subscription features that are visible in the app;
  • transfer Gmail data to others only when necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
  • do not sell Gmail data, or transfer it to advertising platforms, data brokers or information resellers;
  • do not use Gmail data for advertising, including personalised, retargeted or interest-based advertising;
  • do not use Gmail data to determine credit-worthiness or for lending purposes;
  • do not use Gmail data to develop, improve or train generalised AI or machine-learning models;
  • do not allow humans to read your Gmail data, unless you give us explicit permission for specific messages (for example, in a support request), it is necessary for security purposes such as investigating abuse, or it is required to comply with law.

Sharing

We share data only with service providers that run SubSentry on our behalf, under contracts that limit their use of it:

  • Supabase: database and servers, hosted in the United States (AWS us-west-2, Oregon).
  • Expo: delivery of push notifications.
  • RevenueCat: SubSentry Pro purchase status.
  • Apple and Google: sign-in, and Gmail access if you connect it.

We do not sell personal information.

Security

Data is encrypted in transit (TLS) and at rest. Gmail access credentials are additionally encrypted with keys held separately from the database, and they are never sent to your phone. Database-level security rules restrict each person to their own data.

Retention and deletion

  • Disconnect Gmail in Settings at any time. We revoke our access with Google immediately and delete SubSentry’s stored access to it. You can also remove SubSentry at myaccount.google.com/permissions. Subscriptions you confirmed stay in your account until you delete them.
  • Delete your account in Settings › Delete account. We revoke our access with Google and Apple and delete your account and all associated data immediately. Any copies left in our hosting provider’s backups are deleted automatically when those backups expire.
  • Details extracted from billing emails are deleted after 24 months. Records of sent notifications are deleted after 180 days, and scan history after 90 days. Subscriptions and their payment history stay until you delete them or your account.
  • Download your data at any time in Settings › Export my data (a JSON file).

Your rights

You can access and export your data (Settings › Export my data), correct it (edit any subscription in the app), and delete it (Settings › Delete account). Depending on where you live (for example in the EU, the UK or California), you may also have the right to object to or restrict how we process your data, and to complain to your local data protection authority. We don’t sell or share personal information for advertising, and we won’t treat you differently for using your privacy rights. To make a request, email [email protected].

Children

SubSentry is not intended for children under 16, and we don’t knowingly collect their information.

Changes to this policy

We’ll tell you in the app about material changes to this policy and update the date above.

Contact

[email protected]