SubTracker is an app that helps you keep track of your subscriptions and recurring
payments in one place.
Data we process
- Account: email and password (stored only as an encrypted hash), so you can sign in.
- Connected inbox: with your explicit consent, we access your inbox in
read-only mode to find receipts for subscriptions and recurring payments
(e.g. PayPal, Amazon, Google, Apple). From those we take the service name, the amount and the date.
What we do with your email
- We look only for emails that appear to be receipts or payment confirmations;
we do not read or keep your personal correspondence.
- We store the access permission (token) in encrypted form (AES-256-GCM) and we do not
share it with anyone.
- You can disconnect the inbox at any time from your profile: the permission is
revoked and the related data deleted.
What we do NOT do
- We do not access bank accounts, and we neither make payments nor move money.
- We do not sell your data to third parties and we do not use it for advertising.
Who can access your data
- To run the app and support you, a small number of authorised staff
(today the founder alone) can access your account data when strictly necessary, for example
to answer a request of yours.
- We use aggregated and anonymous statistics (for example number of users, average
spending and saving, most common services) to understand how to improve the product: they are
overall figures that identify no one.
Retention and deletion
Data is kept for as long as you use the service. You can delete your account and all
your data at any time from your profile (the “Delete account” section), or by writing to the
contact at the bottom of this page.
Legal basis
The processing of the data in your inbox is based solely on your consent
(art. 6 GDPR), which you can withdraw at any time.