SubTracker is an app that helps you keep track of your subscriptions and recurring
payments in one place.
Data we process
- Account: email and password (stored only as an encrypted hash), so you can sign in.
- Connected inbox: with your explicit consent, we access your inbox in
read-only mode to find receipts for subscriptions and recurring payments
(e.g. PayPal, Amazon, Google, Apple). From those we take the service name, the amount and the date;
for every email read we also keep the sender and subject (details below).
Google user data we read
- When you connect a Gmail inbox, SubTracker uses the Gmail API with a single scope,
https://www.googleapis.com/auth/gmail.readonly, which is read-only: we never send,
modify, archive or delete anything in your mailbox, and we request no other Google scope.
- What we read: only messages from the last twelve months that come from known shops and
services, or that carry a billing word in the subject. For those messages we read the sender, the
subject, the date and the body, to work out the service, the amount, the billing cycle and the next
renewal.
- What we keep: the extracted data (service, amount, date, billing cycle, the last four
digits of the card when the receipt states them, a payment reference), plus the sender, the subject
and the message id, which keeps the same receipt from being counted twice.
The body of the email is never stored.
- Who else sees it: to recognise a receipt, the text of that email is sent to the
artificial intelligence providers listed below, which work on our behalf and do not use it to train
their models. Data received from Google is never used for advertising, never sold, and never used
to build or improve generalised artificial intelligence models.
- For how long: as long as you use the service. Disconnecting the inbox deletes the access
permission and asks Google to revoke it; deleting your account also removes the data extracted from
the receipts (and from our backup copies within 30 days).
- Limited Use: The use of information received from Google Workspace scopes will adhere to
the Google User Data
Policy, including the Limited Use requirements.
What we do with your email
- We download only emails from shops and services (for example PayPal, Amazon, Google)
and those with payment-related words in the subject, such as “payment” or “invoice”. The rest of
your mail is not downloaded. From these we keep the data of receipts or payment
confirmations (service, amount, date, the last 4 digits of the card when present, a payment
reference) and, for every email read, even when it is not a receipt, the sender and
subject: the text of the emails is not stored on our servers.
- We store the access permission (token) or the app password in encrypted form
(AES-256-GCM) and we do not share them with anyone.
- You can disconnect the inbox at any time from your profile: the access permission is
deleted from our servers (and from our backup copies within 30 days); the same applies when you
delete your account. For Gmail we also ask
Google to revoke it, unless the same inbox is connected to another SubTracker account; you can
check it or remove it yourself at
myaccount.google.com/permissions. For
Outlook connected with Microsoft sign-in, the permission is removed in your Microsoft account
settings; for inboxes connected with an app password, you can delete it in your provider's
settings.
Who analyses the emails
- To recognise receipts, the text of these emails is sent to artificial intelligence
services working on our behalf: Groq, Inc., the main one, set up to keep nothing, and
Anthropic, PBC, which settles it when Groq's two models disagree and acts as a backup, and
deletes the data within 30 days. Neither uses it to train its models. Photos and PDFs of receipts you
upload with the Pro plan are read by Anthropic.
- These providers have servers in the United States: the transfer takes place under the
standard contractual clauses approved by the European Commission.
What we do NOT do
- We do not access bank accounts, and we neither make payments nor move money.
- We do not sell your data to third parties and we do not use it for advertising.
Who can access your data
- To run the app and support you, a small number of authorised staff
(today the founder alone) can access your account data when strictly necessary, for example
to answer a request of yours.
- We use aggregated and anonymous statistics (for example number of users, average
spending and saving, most common services) to understand how to improve the product: they are
overall figures that identify no one.
The website and cookies
This part concerns only the website www.subtracker.it, not the app.
- A technical cookie remembers the language chosen on the site. It does not need consent.
- Only if you accept in the banner, the site loads the Google Ads tag, which uses
cookies to measure which ads lead people to tap the App Store and Google Play buttons. We do not use
it for personalised advertising or to follow you on other sites. That data is processed by Google,
under its privacy policy.
- If you decline, the Google Ads tag is not loaded and sets no cookies. Your choice lasts six
months and you can change it at any time from Cookie preferences, at the bottom of the site.
- For every visitor the site loads its fonts from Google Fonts and some service logos from
icon.horse and Google: these services receive the IP address needed to deliver the files,
without cookies.
- We also count visits and taps on the store buttons ourselves, without cookies and
without IP addresses: they are just daily numbers.
Retention and deletion
Data is kept for as long as you use the service. You can delete your account and all
your data at any time from your profile (the “Delete account” section), or by writing to the
contact at the bottom of this page. After deletion it remains only in our backup copies,
which are deleted automatically within 30 days.
Legal basis
The processing of the data in your inbox is based solely on your consent
(art. 6 GDPR), which you can withdraw at any time. The Google Ads cookies on the website are also
used only with your consent.