Privacy Policy

1. Information you give us

When you create an account we collect your name, email address, and the sign-in method you choose (email and password, or Google).

We store the subscription and bill details you add or import: provider names, amounts, currencies, billing cycles, renewal dates, categories, notes, payment records, and any receipt images or files you upload.

If you contact support, we keep the messages you send so we can resolve the issue.

2. Information from connected services

If you choose to connect Gmail, we request read-only access and process message content only to find subscription receipts. Access tokens are encrypted at rest. You can disconnect Gmail at any time from Settings.

If you use your SubHalt forwarding address, we process the forwarded email and its attachments to extract receipt details.

If you sign in with Google, we receive the basic profile information Google shares for sign-in, such as your name, email address, and profile image.

3. Payment information

Paid plans are processed by Paystack. We receive the payment status and a transaction reference, but we do not store full card details.

Payment providers handle card data under their own privacy and security policies.

4. Technical information

We process IP addresses, browser and device information, and request timestamps to keep the service secure, apply rate limits, and diagnose failures.

The app stores a session cookie and local preferences such as your theme and display currency.

5. How we use information

We use your information to provide and maintain the app, including tracking renewals, importing receipts, generating the summaries and AI responses you request, processing payments, preventing abuse, and providing support.

We do not sell your personal data, and we do not use your subscription records for advertising.

6. Service providers

We share information with providers that help us run SubHalt: Supabase (authentication, database, and storage), Vercel (hosting), Paystack (payments), email delivery providers, Groq (AI assistant responses), Google (sign-in and optional Gmail access), Logo.dev (provider logos), and public currency-rate providers.

Each provider receives only what it needs for its function and is subject to its own terms and privacy policy.

For Google user data: Gmail access is read-only and limited to finding receipts. We do not sell that data, and no person reads it except for security purposes, to provide support at your request, or to comply with the law.

7. Security and isolation

Your records are isolated to your account with PostgreSQL Row Level Security. Gmail tokens are encrypted, traffic is served over HTTPS, and access to production systems is restricted.

No online service can guarantee absolute security, but we work to protect your data and to limit what any one system or person can access.

8. Retention and deletion

We keep your data while your account exists. You can delete your account from Settings, which removes your subscriptions, bills, and related records. Backups may persist briefly after deletion, and we may retain limited records where the law requires it.

9. Your choices and rights

You can access and correct your data in the app, export it, disconnect Gmail, turn notifications off, and delete your account.

Depending on where you live, you may have additional rights over your personal data. Contact us and we will help.

The free plan may show Google AdSense ads. Google’s advertising policies apply, and you can control ad personalisation through your Google account settings.

10. Children

SubHalt is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will remove it.

11. Changes to this policy

We may update this page as the service changes. The date at the top shows the latest revision, and material changes will be communicated in the app or by email.

12. Contact

Questions or requests about your data: support@subhalt.app.