Your data, explained.
Your subscriptions stay encrypted on your devices. This page explains exactly what leaves them, why, and the terms for using SubsTrack.
Last updated 30 September 2026
Who we are
SubsTrack is an app for tracking subscriptions, published by Ilias Pelekas, an independent developer (“we”, “us”). Ilias Pelekas is the data controller for the personal data described here.
Contact for any privacy question or request: support@subs-track.app.
This policy applies to the SubsTrack apps, your SubsTrack account and the websites subs-track.app and auth-staging.subs-track.app. Last updated 30 September 2026.
What stays on your device
Your subscriptions, prices, dates, notes, payment records, reminders and app settings are stored in an encrypted vault on your device (AES-256-GCM). The key is protected by your device’s secure storage and unlocked with Windows Hello, Face ID, Touch ID, fingerprint or your device PIN. We cannot read this data.
Reminders are scheduled locally by your device. Bank statement files you import are read on your device and never uploaded. Widgets show only how many renewals are coming up, never names or amounts. Files you export are unencrypted copies that you control.
What we process for your account
When you create a SubsTrack account we process:
- your email address, and a hashed (not readable) version of your password;
- passkeys you add (public keys only) and an account recovery code in protected form;
- if you use Sign in with Apple, the email address and identifier Apple shares with us;
- sign-in sessions, including the IP address and browser or device information of each session;
- security records, such as a keyed hash of the IP address used when a first device is set up, and records of devices you approve for your account;
- your plan (Free or Pro) and, if you redeem a code, which code was used and when.
We send account emails, such as verification and password reset messages, to your address. We do not send marketing email.
Sync between your devices
When sync between devices is available and you turn it on, your vault is sent to our servers only in encrypted form, with keys that stay on your devices. We store the encrypted data, device public keys and the technical records needed to pair devices and recover access, but we cannot decrypt your subscriptions.
Requests the app makes
- Logos: when you ask SubsTrack to find a logo for a custom service, the app contacts only that service’s own website to download its icon.
- Exchange rates: the plan screen may request public exchange rates from open.er-api.com to show prices in your currency. No account data is sent.
- Links you open: management and cancellation links open in your browser and are subject to that website’s own privacy policy.
The app contains no advertising, no analytics and no tracking tools.
This website
The website does not use analytics or advertising. Cloudflare, which hosts it, sets a strictly necessary security cookie (__cf_bm) to tell people from bots. Fonts and images are served by this website itself; the pages load nothing from other companies. The account pages use a cookie to keep you signed in.
If you use the contact form, your name, email address, message and the page you wrote from are sent to us by email so we can reply. We keep them only as long as needed to handle your message, and no longer than 12 months.
Why we process data, and on what basis
- To provide your account, sign-in, sync and Pro features: performance of our contract with you (Art. 6(1)(b) GDPR).
- To keep accounts and the service secure and prevent abuse, including session and IP records and security cookies: our legitimate interests (Art. 6(1)(f) GDPR).
- To answer messages you send us through the contact form or by email: our legitimate interest in replying (Art. 6(1)(f) GDPR).
- To meet legal obligations, such as tax records for purchases: Art. 6(1)(c) GDPR.
We do not sell your data or use it for advertising or profiling.
Service providers and transfers
- Cloudflare, Inc. hosts our servers, databases and websites and sends account emails.
- Apple, only if you choose Sign in with Apple.
- Apple App Store and Google Play, when you buy Pro through them. They process your payment under their own terms; we receive confirmation of your purchase, not your card details.
Some providers process data outside the European Economic Area. These transfers are protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep data
- Account data: while your account exists. When you delete your account in the app (Settings → Delete account), we immediately delete your sign-in details, passkeys, sessions, synced encrypted data and Pro status, and the app removes your subscriptions from that device. Copies in our database provider’s automatic backups are overwritten within 30 days.
- Sign-in sessions expire automatically and are then removed.
- Records of redeemed codes and purchases: as long as your Pro access lasts, and longer where tax law requires.
- Data on your device: until you delete it or uninstall the app. We cannot delete it for you.
Your rights
Under the GDPR you can ask for access to your data, a copy of it in a portable format, correction, deletion, restriction of processing, and you can object to processing based on legitimate interests. You can delete your account at any time in the app under Settings → Delete account. For any other request, or if you can no longer sign in, email support@subs-track.app from the address on your account. We answer within one month.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority in the EU country where you live.
Children
SubsTrack is not intended for children under 16, and we do not knowingly create accounts for them.
Changes to this policy
We will update this page when our practices change and show the new date at the top. For significant changes we will also tell you in the app or by email.
Terms of use
These terms apply when you use SubsTrack. By using the app or creating an account you accept them. Last updated 30 September 2026.
What SubsTrack does
SubsTrack helps you record your subscriptions, reminds you before renewals and keeps a record of what you pay. It works with the details you enter. It does not connect to your bank, verify charges, or cancel or change a subscription with its provider: do that with the provider. SubsTrack does not provide financial advice.
Your account
Give a real email address, keep your password and devices secure, and tell us if you think someone else is using your account. Your account is personal to you.
Your vault is encrypted with keys only you hold. Keep your recovery shares safe: if you lose all your devices and your recovery shares, neither you nor we can recover your data.
SubsTrack Pro, purchases and codes
- The free plan tracks up to 2 subscriptions. SubsTrack Pro removes this limit.
- Yearly (€9.99 per year) starts with a 7-day free trial and renews every year until you cancel. Cancel before the trial ends to avoid being charged. Lifetime (€19.99) is a single payment for Pro as long as SubsTrack is offered.
- Purchases made through the App Store or Google Play are billed, renewed, cancelled and refunded by Apple or Google under their terms; manage them in your store account.
- Codes for SubsTrack Pro are free promotional offers. They can be used once per account unless stated otherwise, have no cash value, may expire, and can be revoked if obtained or used unlawfully.
Your statutory rights as a consumer, including any right of withdrawal and warranty rights under Polish and EU law, are not affected.
Acceptable use
Do not misuse SubsTrack: do not try to access other people’s accounts or data, interfere with our servers, get around the free plan limits or code rules, or use the service unlawfully. We may suspend accounts that do.
Availability and changes
We work to keep SubsTrack available and your data safe, but the service may occasionally be interrupted. Features marked as beta may change. We may update the app and these terms; we will tell you about significant changes in advance.
Liability
SubsTrack is a tracking tool; you remain responsible for checking amounts and dates with your providers. To the extent permitted by law, we are not liable for missed payments, charges by providers or indirect losses. Nothing in these terms limits liability that cannot be limited by law, including for intentional harm, or your rights as a consumer.
Ending your use
You can stop using SubsTrack at any time and delete your account in the app under Settings → Delete account, or by emailing support@subs-track.app. Deleting your account does not cancel an App Store or Google Play subscription: cancel that in your store account.
Governing law
These terms are governed by Polish law. If you are a consumer in the EU, you also keep the protection of the mandatory laws of the country where you live, and you may bring a claim in its courts.
Contact
Questions about these terms or your data: support@subs-track.app.