Privacy Policy

1. Information We Collect

To provide subscription tracking and syncing services, Subly collects the following data points:

• Profile Details: When creating an account, we store your email address and password hashes to configure secure authentication profiles.
• Subscription Metrics: We store subscription titles, payment costs, billing currencies, billing cycles, custom category tags, and alert offsets that you choose to log.
• System Logs: IP addresses and device identifiers are processed solely for authentication handshakes and sync diagnostics.

2. Authentication & Cloud Syncing

Subly uses Firebase Authentication to manage secure client logins. Data synchronization across your devices uses industry-standard AES-256 end-to-end encryption. Your database encryption keys are generated locally from your login password, ensuring we cannot view or decrypt your subscription details on our servers.

3. Third-Party Services

We work with specific third-party SDKs to manage notifications, authenticate logins, and diagnose performance errors. These include:

• Google Play Services: Manages mobile app deliveries and play store subscription status checks.
• Firebase (Google LLC): Manages profile authentication, cloud storage synchronization, and push notifications.
• Crashlytics (Google LLC): Monitors crash reports and runtime diagnostics to maintain application stability. No financial logs are sent.

4. GDPR and CCPA Rights

Under European Union GDPR and California CCPA guidelines, you possess specific data protections:

• Right to Erasure (Deletion): You can request permanent account removal and sync history deletion at any time.
• Right to Portability: You can export all subscription data as a clean JSON or CSV file from the application.
• Right to Opt-Out: You can disable cloud storage syncing, keeping all data restricted exclusively to local caches on your phone storage.

5. Data Retention & Account Deletion

We retain authenticated profile data and sync databases for as long as your account remains active. If you submit a deletion request via our deletion portal, we hold a 7-day grace period during which you can cancel. On Day 8, your active cloud records are deleted. Backups are fully overwritten within 30 days.