Privacy policy

Last updated: 21 October 2026

The short version

• SubSaver finds your subscriptions by reading billing emails — only if you connect an inbox, and only with read-only access you can revoke at any time.
• We store what we extract (the service, price, billing period, dates and the payment method shown on the receipt, such as “Visa ••4242”), never the emails themselves.
• We never sell your data or share it for advertising, never show you ads, and never use your data to train AI models.
• No advertising cookies. Google Analytics runs only if you accept it in the cookie banner.
• Everyone gets the same core rights, wherever they live. You can export or delete everything yourself, in Settings.

1. Who is responsible

The operator of SubSaver below is responsible for your personal data — the “controller” under the EU and UK GDPR, the “business” under US state laws, and the equivalent under the other laws mentioned in this policy:

[Legal name of the operator: to be added][Postal address: to be added][Country: to be added]Email: support@subsaver.help

Privacy questions and requests: support@subsaver.help. This policy covers the SubSaver website, web app and the iPhone and Android apps.

2. What we collect and where it comes from

From you

• Account: you sign in with Google or Microsoft, which gives us your email address, your name, (Google only) your profile picture, which provider you used and your account ID there — or with a one-time sign-in link we email you, which gives us only your email address. We never get your password, and we don't keep sign-in tokens from these providers.
• Subscriptions and settings: subscriptions you add or edit, notes, the services you hide, reminder settings, language, timezone, currency, billing country and an optional monthly budget.
• Support messages: your name if you give it, your email address, subject and message.
• Invites and shared year cards: your invite code; if you joined through someone's invite, that link between your accounts, when you first paid and the rewards given (to check a payment wasn't refunded and that it isn't the same person, we compare the payment cards' fingerprints at Stripe — never the card numbers). The person who invited you only sees that someone joined and the dates, never your name or email address. A year card you choose to share shows totals only, plus up to three service names if you tick that box, to anyone with the link, until you stop sharing.

From your inbox (only if you connect one)

When you connect Gmail or Outlook you grant read-only access (gmail.readonly or Mail.Read). We store the inbox address, the permissions you granted and the access tokens, encrypted. iCloud Mail and Yahoo Mail don't offer that kind of access to apps, so for those you create an app password in your Apple or Yahoo account: SubSaver stores it encrypted, uses it only to open your inbox read-only, and deletes it when you disconnect. You can revoke it at Apple or Yahoo at any time.

With that access, SubSaver looks for billing emails (receipts, invoices, renewal and free-trial notices, price-change and cancellation emails) from the last 12 months, then checks regularly for new ones. To find them it uses your email provider's search where available; otherwise it looks at the sender, subject, date and short preview of recent messages, in memory, to pick out likely bills.

For each likely bill it reads the sender, subject, date, body and any PDF invoice in memory only and extracts: the service, amount, currency, billing period, renewal or trial-end date, the payment method shown on the receipt (the card brand and last four digits, such as “Visa ••4242”, or a type of payment such as PayPal or direct debit — never a full card or account number), and — when it points to the service's own website — the link to manage or cancel. Only those extracted details are stored, plus the email's technical message ID and how it was classified, so the same email is never processed twice. Email text and attachments are never stored.

From payment and app providers

• Stripe (paid plans): your Stripe customer and subscription IDs, plan, billing status, and for each invoice the amount, currency, status, date and a link to it. You enter card details at Stripe; we never see or store them.
• Push notifications (only if you turn them on): your browser's push address and encryption keys, or your phone's push token and platform (iPhone or Android).

Automatically

• Security data: your IP address and account ID are used briefly to prevent abuse, such as repeated sign-in attempts or contact-form spam. A security log records actions on your account (such as connecting an inbox or changing your plan) with the time — not your IP address.
• Technical logs: errors and events, with internal IDs, for troubleshooting. They never contain email content.
• Speed measurement: Vercel Speed Insights measures how fast pages load and respond (Core Web Vitals) together with the page address, browser, operating system, device type, connection speed and approximate country — without cookies and without identifying you.
• Website analytics, only with your consent: if you accept analytics cookies, Google Analytics records the pages you view on our website, how you arrived, your browser and device type and your approximate location, with a random ID in a cookie. It never receives anything from your SubSaver account or your emails, and the phone apps never use it.
• Records of what we sent you: reminders and alerts (title, text, channel, status) and which reminders went out for which renewal.

3. Why we use it, and our legal basis

The GDPR requires a legal basis for each use; the table shows ours. Other privacy laws (such as Brazil's LGPD or South Africa's POPIA) recognise the same grounds. Where a law requires your consent, we ask for it.

Our legitimate interests, weighed against yours: we rely on them only for price-list accuracy, security, troubleshooting, support and legal protection. These uses are limited to what is necessary, are expected by people using an online service, use as little data as possible and keep it for short, fixed periods. You can object to them at any time (see section 10).

If you don't provide your email address we can't create an account. Connecting an inbox and turning on push are optional; you can add subscriptions by hand instead.

We don't send marketing emails. Reminder emails and the monthly summary are part of the service; turn each off in Settings or with the one-click unsubscribe link. Sign-in links and account, security and billing emails always arrive.

How we keep the price list up to date

• An automated check visits services' public pricing pages about once a week to see whether the listed prices still appear. It identifies itself, follows each site's robots.txt rules, never signs in and involves no personal data.
• To spot price changes, SubSaver also looks at amounts that several users pay for the same service, counted together. Only the amount and the service are used — never who pays it.
• A person reviews every suggested change before the price list is updated.

Sensitive information

A subscription can reveal something personal — for example a health, dating or religious app. We don't look for such information or draw conclusions from it. We only process it because you asked SubSaver to track your subscriptions, based on your explicit consent when you connect an inbox or add a subscription (GDPR Art. 9(2)(a)). You can delete any subscription, or hide a service so it's never added again.

Automated detection

Deciding whether an email is a bill and which subscription it belongs to is automatic. It only fills in your own subscription list. It has no legal or similarly significant effect on you, so it is not automated decision-making under GDPR Art. 22 or similar laws. We don't profile you for advertising. You can correct, confirm or delete anything it finds, and hide a service so it isn't added again.

4. Google and Microsoft data

SubSaver's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We apply the same rules to data from Microsoft (Outlook via Microsoft Graph). Data from your Gmail or Outlook account:

• is used only to provide and improve the subscription-tracking features you see in SubSaver;
• is not transferred to anyone else, except as needed to provide those features (to the service providers in section 5), to comply with the law, or as part of a merger, acquisition or sale of SubSaver, after telling you;
• is never used for advertising (including retargeting or personalised ads), never sold, and never used to develop, improve or train generalised AI or machine-learning models;
• is not read by people, unless you give us permission for specific messages (for example in a support request), it is needed for security purposes such as investigating abuse, or the law requires it.

You can remove SubSaver's access at any time: disconnect the inbox in Settings → Connected inboxes (for Gmail we also revoke our access at Google), or do it in your Google account or Microsoft account.

5. Who we share it with

We don't sell or rent personal data, and we don't share it for advertising. We use these service providers (“processors”). Each is bound by a data processing agreement and may only use your data to provide its service to us:

These companies also receive data when you use their services with SubSaver. They act as independent controllers under their own privacy policies:

Stripe also acts as an independent controller for its own legal duties, such as fraud prevention and anti-money-laundering checks. Details, including what each provider receives, are on our sub-processors page.

The services you track get nothing from us. SubSaver never contacts them about you and never tells them that you use SubSaver. To show a service's logo, our server requests the icon by the service's web address only — nothing about you is included.

If you subscribe to your renewal calendar, your calendar app fetches your subscription names, prices and renewal dates from a private link you control (and can reset in Settings).

We may also disclose data when the law requires it (for example a valid court order), to protect the rights, safety or property of our users, the public or SubSaver, or to a buyer or successor if SubSaver or its operator is reorganised, merged or sold — the successor must keep the commitments in this policy, and we'll tell you before your data becomes subject to a different policy.

6. International transfers

SubSaver is hosted in Frankfurt, EU. Some providers are based in, or give access from, the United States or other countries. Your data may therefore be processed outside the country where you live, where privacy laws may differ.

• From the EU/EEA, UK and Switzerland: where a country has no adequacy decision, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) for certified providers, or on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments).
• From other countries (for example Brazil, Canada, Japan, Singapore, South Africa, India or Australia): our contracts require providers to protect your data to a standard comparable to your local law, or we rely on another transfer ground that law allows.

You can ask us for a copy of the relevant safeguards.

7. How long we keep it

Deleting your account removes your data from our live systems immediately, cancels any paid plan with Stripe and, for Gmail, revokes our access at Google.

8. How we protect it

• Read-only inbox access, which you can revoke at any time.
• Encryption in transit, and at rest by our database provider; inbox access tokens and app passwords are additionally encrypted by SubSaver.
• Every request is checked against your account; no one can see another user's data.
• Least-privilege access: only the operator can reach production systems.
• Protection against abuse, and regular security reviews and updates.

More on our security page. If a breach affects your data and creates a risk to you, we'll notify the competent authority and, where required, you — within the time limits the law sets.

9. Children

SubSaver is not for anyone under 16, or under the higher age your country sets for agreeing to data processing on your own (for example 18 in India). We don't knowingly collect data from children. If you believe a child has given us data, email support@subsaver.help and we'll delete it.

10. Your rights

Wherever you live, you can ask us to:

• tell you whether we hold data about you, and give you a copy;
• correct it;
• delete it;
• restrict how we use it, or stop a use you object to;
• give it to you in a portable format;
• stop using it where you gave consent — without affecting earlier use.

Most of this is self-service. Settings → Your data has export (a file of everything we store about you, except secrets such as tokens) and delete; Settings → Connected inboxes has disconnect; you can edit or delete any subscription yourself. For anything else, email support@subsaver.help.

• We reply within one month, or sooner where your law requires (extendable where the law allows, in which case we'll tell you why).
• We may ask you to confirm the request from your account's email address so we know it's you. An authorised agent can act for you with your signed permission.
• Requests are free unless they are clearly unfounded or excessive.
• We won't treat you differently for using your rights.
• If we say no, we'll explain why. You can appeal by replying to our answer, and you can always complain to your data protection authority (see below). We'd appreciate the chance to sort it out first.

11. Your rights by region

Some laws add details. Open your region:

12. Cookies and tracking signals

We use cookies that are strictly necessary to sign you in, keep sign-in secure and remember your choices (your language, your cookie choice and, only if you click to accept a friend's invite, that invite until you sign up), plus local storage for your light/dark preference and, in the phone apps, push and sign-in details. With your consent only, we use Google Analytics cookies on the website. No advertising cookies. The full list, and a way to change your choice, is on our cookie page. We don't track you across other websites. A browser that sends a Global Privacy Control signal is treated as having rejected analytics: Google Analytics is never loaded for it.

13. Changes and language

We'll update this policy when SubSaver changes. If a change matters — for example a new purpose or a new kind of provider — we'll email you before it takes effect and, where the law requires, ask for your consent. The date at the top shows the latest version.

This policy is written in English. If we offer a translation, it's for convenience; if they differ, the English version applies, unless your local law requires otherwise.

14. Contact

Privacy questions or requests: support@subsaver.help. Everything else: support@subsaver.help or the contact form.