Legal

Privacy Policy

Last updated: March 18, 2026

This Privacy Policy explains how Substract (“we”, “our”, or “us”) collects, uses, and protects your information when you use the Substract mobile application (“App”).

1. Information We Collect

We may collect the following types of information:

a. User-Provided Data

  • Subscription names
  • Prices
  • Billing cycles
  • Categories

b. Automatically Collected Data

  • Device type and operating system
  • App usage and interaction data
  • Crash logs and performance diagnostics
  • Advertising identifiers (such as IDFA), if permission is granted
  • Attribution and campaign data (via third-party analytics providers)

c. Email Integration Data (Optional)

If you choose to connect your Gmail account, we access your email metadata and content solely to identify subscription-related receipts and invoices. This includes email subjects, sender addresses, and email body content. We do not store your emails — they are processed in real-time and immediately discarded after analysis. Connecting Gmail is entirely optional and can be revoked at any time.

2. How We Use Your Data

Your data is used to:

  • Provide subscription tracking features
  • Generate summaries and insights
  • Improve app performance and usability
  • Measure marketing effectiveness and campaign performance
  • Attribute installs and subscription purchases to advertising campaigns
  • Identify and import your subscriptions from email receipts, if you choose to connect Gmail

3. Advertising and Tracking

With your permission through Apple’s App Tracking Transparency (ATT) framework, we may collect advertising identifiers such as IDFA to measure the effectiveness of our marketing campaigns.

This information is used strictly for attribution, analytics, and advertising performance measurement. We do not sell your personal data.

You may withdraw tracking permission at any time through your device settings.

4. Data Sharing

We do not sell your personal data. We may share limited information with trusted third-party service providers for analytics, subscription management, cloud storage, and advertising attribution purposes.

These providers may include:

  • AppsFlyer (attribution and analytics)
  • Firebase (cloud storage and analytics services)
  • RevenueCat (subscription management)
  • Google (Gmail API — email access for subscription detection, only when explicitly connected by the user)

These providers process data on our behalf and are required to protect it under contractual obligations.

5. Email Integration

Gmail connection is entirely optional and requires your explicit consent via Google's OAuth 2.0 flow. When connected, we access your inbox in read-only mode and only process emails matching subscription-related keywords (e.g., receipts, invoices, renewal notices).

We store OAuth tokens securely in order to perform periodic renewal scans on your behalf when you enable auto-scan. We do not store, share, or sell the content of your emails. You can disconnect Gmail at any time from Settings, which immediately revokes our access and deletes all stored OAuth tokens.

6. Website Analytics and Cookies

Our website uses Google Analytics (GA4) to understand traffic and improve the website experience. GA4 may process information such as page views, browser details, and approximate location inferred from IP-based signals.

We only activate analytics cookies when you provide consent through the cookie banner. You can accept or reject analytics cookies at any time before they are activated.

7. Data Storage and Security

User data is securely stored using industry-standard cloud services. We implement reasonable technical and organizational measures to protect your information from unauthorized access or disclosure.

8. User Rights

You may:

  • Request deletion of your data
  • Withdraw tracking permission through device settings
  • Disconnect Gmail integration and revoke email access at any time through Settings
  • Stop using the App at any time

For data-related requests, contact: privacy@getsubstract.com

9. Third-Party References

Substract may reference third-party services (e.g., Netflix, Spotify) for informational purposes only. We are not affiliated with or endorsed by these companies.

10. Children’s Privacy

Substract is not intended for children under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last updated” date above.

12. Contact

If you have any questions about this Privacy Policy, contact us at: privacy@getsubstract.com

← Back to Home