Privacy policy

SubEye is a subscription tracker for iPhone. You type in what you pay and it tells you what that costs. There is no account, no sign-in and no SubEye server: everything you enter is stored on your own device and stays there unless you switch on iCloud Sync yourself, which copies it to your own iCloud and never to us. It has no access to your bank, no access to your email, and it does not go looking for subscriptions on your behalf.

Who is responsible

SubEye is built and operated by Yehor Hunko, an individual based in Ukraine, acting as the data controller. For anything in this policy, write to privacy@subeye.cc.

What stays on your device

• The subscriptions you enter: service name, website, amount, currency, billing period, payment dates, category, price history and any note you write. All of it typed by you, all of it held in the app's own storage on the phone. SubEye never uploads it and has nowhere to upload it to; the one thing that ever copies it off the phone is iCloud Sync, which you switch on yourself and which is described below.
• Your settings and reminders, including the reminder schedule iOS holds for you.

None of this is collected by SubEye in the sense the word usually means. It is included in a device backup if you back your iPhone up, under Apple's own terms.

What leaves the device, and to whom

• Your subscriptions, but only if you turn on iCloud Sync: the switch in Settings → Data copies them into your own iCloud so that your other devices can show the same list. It is off until you turn it on, it goes to Apple rather than to SubEye, and switching it off again leaves the copy already in your iCloud until you erase it.
• Technical data that any web request carries — an IP address and a device user agent — seen by the services listed below at the moment the app talks to one of them.
• Diagnostics, when something goes wrong: if the app crashes, the stack trace with your device model and OS version. If you buy SubEye Pro, the App Store receipt for that purchase. Neither carries anything you typed, and neither is tied to a name, an email address or an account.
• What you type into the brand logo search, described in full below.

There is no advertising identifier, no location data, no contacts, no photos, and no advertising or product-analytics SDK in the app. Two SDKs do ship inside it — crash reporting and purchases — and both are listed below.

Who else processes it

These are every third party the app can reach, and each one is reached only when the app has a reason to. None of them receives your subscriptions — the single exception is Apple's iCloud, and only once you have switched iCloud Sync on yourself. None of them is given a name, an email address or an account identifier, because SubEye holds none of those.

Sentry — crash reporting (European Union)

Receives the stack trace of a crash in the app, with your device model and OS version. That is all of it: no subscription names, no amounts, no notes, no email address, no user identifier, no screenshots and no session recording.

RevenueCat — purchases (United States)

Receives the App Store purchase receipt and the store transaction if you buy SubEye Pro. It is what makes "you bought Pro" survive a reinstall or a new phone. The app user id it works with is anonymous — generated on the device, not linked to any account — and it receives no subscription data and no email address.

Brandfetch — brand logo search

Receives the text you type into the brand picker. Described in full below.

Google — logo images

Service logos are loaded as favicons from google.com/s2/favicons. That request discloses the website domain of the subscription and your IP address. It carries nothing else you typed.

jsDelivr — exchange rates (global CDN)

Once a day, the app downloads a public exchange-rate file from cdn.jsdelivr.net so that a hryvnia subscription and a dollar subscription can be added up. It is the same file for everyone and the request carries nothing but your IP address — no subscription data, no currencies you use, no identifier. If the download fails, the rates already on the device keep working, and so does the app.

Apple — the App Store and iCloud

Handles the purchase if you buy SubEye Pro, under Apple's own privacy policy. SubEye never sees your payment details. If you back up your iPhone to iCloud, your SubEye data is inside that backup, under Apple's terms. If you switch on iCloud Sync, your subscriptions are also written to your own iCloud storage so your other devices can read them: they are held under your Apple Account, under Apple's terms, and SubEye still never receives them.

The brand logo search, specifically

When you add or edit a subscription you can search for a service by name to attach its logo. What you type in that field is sent to api.brandfetch.io, along with your IP address, because that is how the search runs.

Nothing else goes with it. No identifier, no email address, no subscription data, no token. The results are used to draw the list on screen and are never written to disk. If you would rather not use it, leave the website field empty and type the service name yourself — the app works exactly the same without a logo.

Why any of this is held

Your subscriptions are held on your device because that is the app: it cannot add up what it cannot store. Under the GDPR, data that stays on your own device and is never transmitted to SubEye is not processed by SubEye at all. For the few requests that do leave the phone, the legal basis is legitimate interest — keeping the app working, fixing crashes, honouring a purchase you made, and converting currencies correctly.

iCloud Sync is the exception, and it is consent: it does nothing until you turn it on, and turning it on is the permission. Even then the copy goes to your own iCloud rather than to SubEye, so there is no point at which SubEye is the recipient of it.

Your data is not sold, not shared with advertisers, not used to profile you, and not used to train anything. There is no tracking across apps or websites, and no third-party advertising or analytics SDK inside the app.

Renewal reminders are scheduled on your device by iOS. There is no push server and no notification token, so no one — including SubEye — learns when a reminder fires.

How long it is kept, and how to delete it

Your subscriptions are kept on your device for as long as you keep them. Delete a subscription in the app and it is gone from the phone. Delete the app and everything in it goes with it.

Settings → Erase all data removes every subscription, reminder and setting from the device in one step. It is immediate, it is a real deletion rather than a flag, and it cannot be undone. With iCloud Sync on it clears the iCloud copy as well, which is what takes the data off your other devices. There is no further copy to ask anyone to delete — and because there is none, an iPhone backup you made earlier is the only thing that can bring the data back.

A crash report already sent to Sentry is kept under Sentry's own retention policy and then dropped. A purchase record at RevenueCat and Apple is kept as long as those services require, because it is what proves you own Pro.

Your rights

SubEye serves the European Union and Ukraine, so the GDPR and Ukraine's Law on Personal Data Protection apply. You have the right to access a copy of your data, to correct it, to have it erased, to receive it in a portable form, to restrict or object to processing, and to complain to your supervisory authority.

In practice most of those are already in your hands rather than in anyone else's: your data is on your device, you can read it, correct it and erase it in the app without asking permission. For anything else — including a crash report or a purchase record held by one of the services above — write to privacy@subeye.cc and expect an answer within 30 days.

Children

SubEye is not directed at children and does not knowingly collect data from anyone under 16. Since there is no account, and nothing is uploaded unless iCloud Sync is switched on, there is nothing held here to delete on a child's behalf — but if something about this concerns you, write to privacy@subeye.cc.

Changes

If this policy changes, the date at the top of this page changes with it. A change that materially affects what is collected or who processes it will be announced in the app before it takes effect.