Privacy Policy
Last updated: 8 April 2026
The short version: Suby tracks your subscriptions on your device. We collect minimal anonymized data to keep the app working and never sell it. If you sign in for cloud sync, your data is encrypted in transit and at rest.
Contents
1. What we collect
Stored locally on your device
Your subscription details (service name, price, currency, billing period, payment method, notes) are stored in a local database on your device. This data never leaves your device unless you opt in to cloud sync.
When you sign in (optional)
If you create an account to enable cloud sync, we collect your email address and an encrypted copy of your subscription data. Authentication is handled by Supabase.
Automatic, anonymized
- App version and device model (for crash debugging)
- Anonymized analytics events (which screens you visit, which features you use) — no personal content
- Crash reports (stack traces and breadcrumbs)
You can disable analytics in Settings → Privacy at any time.
2. How we use your data
- Provide the service. Show your subscriptions, send renewal notifications, calculate totals.
- Improve the app. Understand which features are used so we can prioritize improvements.
- Fix bugs. Crash reports help us identify and fix issues.
- Process payments. Manage Suby Premium subscriptions through RevenueCat and your app store.
We do not sell your data. We do not share it with advertisers. We do not use it to build profiles of you for anything other than running the app you're using.
3. Third-party services
Suby uses the following third-party services. Each has their own privacy policy linked below.
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Amplitude | Anonymized analytics | Event names, app version, device model | amplitude.com/privacy |
| Sentry | Crash reports | Stack traces, breadcrumbs, device info | sentry.io/privacy |
| Firebase Crashlytics | Crash reports | Stack traces, device info | policies.google.com/privacy |
| RevenueCat | Subscription billing | Anonymized user ID, purchase state | revenuecat.com/privacy |
| Supabase | Auth and cloud sync (opt-in) | Email, encrypted sync data | supabase.com/privacy |
4. Your rights
- Access. All your data is in the app — you can see everything we have at any time.
- Export. You can export your subscriptions to CSV from the app settings.
- Delete. Uninstalling the app removes all local data. Deleting your account (if you signed up) removes all cloud-stored data.
- Opt out of analytics. Toggle analytics off in Settings → Privacy.
If you're in the EU (GDPR), UK (UK GDPR), or California (CCPA), you have additional rights including the right to lodge a complaint with your local data protection authority. We honor these rights for all users regardless of location.
5. Children's privacy
Suby is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we'll delete it.
6. Data retention
- Local data: Until you delete it from the app or uninstall.
- Cloud sync data: Until you delete your account.
- Crash reports: Up to 90 days, then automatically deleted.
- Analytics events: Up to 365 days, then automatically deleted.
7. Changes to this policy
We'll update the "Last updated" date at the top whenever we change this policy. Material changes will be communicated via an in-app notice. Continued use after changes constitutes acceptance of the updated policy.
8. Contact us
Questions, requests, or complaints about privacy: support@subyapp.com