Privacy Policy

Information We Collect

Depending on how you use SubIQ, we may collect or process the following information:

• An anonymous Firebase account identifier used to separate and protect your data. SubIQ does not require your name, email address, or password for normal in-app use.
• If you choose Continue with Google to create a synced account, Google and Firebase account information such as your account identifier, email address, display name, and profile image, when provided by Google.
• If you separately connect Gmail to find subscriptions, your Gmail address, an encrypted OAuth refresh token, and data from messages matching billing-focused searches. The message data may include message identifiers, labels, dates, sender and subject headers, snippets, and text extracted from email bodies.
• Subscription records you enter, including company name, company domain or logo, category, price, currency, billing period, start date, trial details, billing changes, cancellation status, renewal information, and reminder preferences.
• App settings such as your preferred currency, language, and theme preference.
• Company search terms and the company names or domains you select when searching for a subscription provider, logo, cancellation guide, or refund guide.
• AI-generated cancellation or refund instructions, source links, and request metadata created when you use SubIQ's guidance tools.
• Analytics and technical information, such as an app-instance or anonymous user identifier, app version, device type, operating system, usage events, performance information, and diagnostic or security logs.
• When you visit the SubIQ website, Google Analytics records page views and may process the page location and title, site language, approximate location, browser and device information, and a first-party identifier stored in the _ga cookie. We do not send waitlist form contents or Firebase Authentication identifiers as website analytics events.
• Support correspondence and any information you choose to include when you contact us.
• Your email address, selected site language, consent time, and the signup location when you choose to join the SubIQ launch waitlist.

How We Collect Information

• Directly from you when you add or edit a subscription, change settings, select a company, use a cancellation or refund tool, enable reminders, join the launch waitlist, or contact support.
• Automatically through Firebase and similar technologies when the app creates an anonymous account, synchronizes data, records analytics, or calls a cloud service.
• From the Gmail API only after you connect a Gmail account and start a scan. SubIQ does not continuously monitor Gmail.
• Through first-party cookies and similar technologies when the dedicated SubIQ website records page views.
• From generated app activity, such as calculated renewal dates, scheduled reminder preferences, AI guidance, and technical logs associated with a request.

How We Use Information

We use information to:

• Create, display, update, synchronize, and delete your subscription records.
• Calculate estimated renewal dates, upcoming charges, calendar entries, and totals in your selected currency.
• Schedule the subscription reminders you choose to enable.
• Search for companies and logos and provide cancellation or refund instructions for the company you select.
• Search for subscription-related Gmail messages, analyze likely billing emails, and present subscription candidates for you to review and optionally save in SubIQ.
• Maintain the app, authenticate requests, prevent abuse, troubleshoot errors, measure performance, and improve features and reliability.
• Respond to support, privacy, and data deletion requests.
• Record your waitlist request and email you about SubIQ's availability or launch.

We do not sell your personal information, and SubIQ does not use your subscription records for third-party advertising.

Accounts, Google Sign-In, and Firebase

SubIQ uses Google Firebase Authentication to create an anonymous account identifier. Your subscription records and preferences are stored in Google Cloud Firestore under that identifier so the app can retrieve and synchronize them. Firebase Cloud Functions authenticate requests for SubIQ's cancellation and refund guidance tools.

You may choose Continue with Google to link the anonymous account to your Google identity and create a persistent SubIQ account. This allows you to sign in and access your subscription records across supported devices. SubIQ receives an authentication token and may receive your Google account identifier, email address, display name, and profile image. SubIQ does not receive or store your Google password.

The SubIQ mobile app uses Firebase Analytics to understand app usage and reliability. It may process an app-instance identifier, the anonymous Firebase identifier associated with your session, device and app information, and interaction events. The dedicated SubIQ website uses Google Analytics to measure page views and may set a first-party _ga cookie to distinguish visits and sessions. We do not use these analytics services to collect subscription record contents, waitlist form contents, or website account identifiers as analytics event data.

Gmail Read-Only Access and Google API Data

Find from Gmail is optional and separate from using Google to sign in to SubIQ. If you enable it, SubIQ requests the Gmail read-only scope so it can search for and read messages that may contain subscription receipts, invoices, trial notices, payment notices, cancellations, or renewals. A scan starts only when you request it. SubIQ cannot use this permission to send, modify, or delete your emails.

Gmail access is processed by Firebase Cloud Functions. The OAuth refresh token is encrypted at rest. During a scan, matching message content and prepared analysis data are stored in a private server-only Firestore area. Relevant sender, subject, date, message identifier, and limited email-body text are sent to Google Gemini so it can identify subscription details such as merchant, plan, price, currency, billing period, status, and billing dates. The resulting scan status and subscription candidates are stored so you can review them in SubIQ.

Temporary message content and prepared analysis data are deleted after a scan completes successfully. If a scan does not complete, that private scan work remains until you disconnect that Gmail account, delete your SubIQ account, or ask us to delete it. Scan results and review candidates remain until you disconnect Gmail, delete your SubIQ account, or request deletion. A subscription you choose to save becomes a normal SubIQ subscription record and is not deleted merely because you later disconnect Gmail.

We do not sell Google user data, use it for advertising or credit decisions, or use it to train or improve a general-purpose AI model. Human access is prohibited except with your explicit consent for specific support, when necessary for security or abuse investigation, or when required by law.

SubIQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and its Limited Use requirements.

AI Guidance and Google Gemini

SubIQ uses Google Gemini through a Firebase Cloud Function to generate informational steps for cancelling a subscription or requesting a refund. When you request guidance, SubIQ sends the selected company name and company domain to our cloud function and to Google Gemini. Gemini may use Google Search and website context to find current source material and return instructions and links.

SubIQ does not send your stored subscription price, billing history, trial details, notification preferences, or other subscription records to Gemini as part of these requests. Cloud logs may record the anonymous user identifier, selected company domain, request timing, source counts, and error information for security, troubleshooting, and service operation.

AI-generated instructions can be incomplete, outdated, or incorrect. You should verify important steps with the subscription provider before acting on them.

Company Search, Logos, and Exchange Rates

• Logo.dev receives company search terms when you search its company directory and receives company domains when the app loads provider logos.
• SubIQ requests general currency exchange-rate data from the ExchangeRate-API public service. These requests do not include your subscription records or entered prices.

These providers may receive standard network information, such as your IP address, user agent, and request time, and process it under their own privacy terms.

Notifications

If you enable reminders, SubIQ asks for your device's notification permission and schedules upcoming-charge or trial-expiration notifications on your device. The app stores your reminder preferences with the relevant subscription record in Firestore. You can disable individual reminders in SubIQ or manage notification permission in your device settings.

Third Parties We Share Information With

We share information only as needed to provide, secure, and improve SubIQ. Providers that may process information include:

• Google Firebase and Google Cloud for anonymous or Google-linked authentication, database storage, cloud functions, analytics, hosting infrastructure, security, and service logs.
• Google Gemini and Google Search for generating grounded cancellation and refund instructions, and Google Gemini for classifying user-requested Gmail scan content into subscription candidates.
• Logo.dev for company search results and company logo images.
• ExchangeRate-API for general currency conversion rates.
• Apple and Google platform services for app distribution, operating-system features, and device notification delivery or scheduling.
• Support, security, and infrastructure providers when needed to respond to requests, protect the service, comply with law, or investigate misuse.
• Cloudflare Turnstile for detecting and preventing automated waitlist submissions. Cloudflare may process standard network, browser, and challenge information for this purpose.

These providers may process information under their own privacy policies and data processing terms. We may also disclose information when required by law or when reasonably necessary to protect users, our rights, or the security of the service.

Data Retention and Deletion

We retain subscription records and preferences while they are associated with your anonymous or Google-linked SubIQ account and needed to provide SubIQ. Analytics, request logs, and security records may be retained for a limited period needed for reporting, troubleshooting, abuse prevention, legal compliance, or service security.

Gmail message content used during a scan is retained as described in the Gmail section above. Disconnecting a Gmail account revokes SubIQ's access and permanently deletes that connection's scan results, review candidates, private scan work, and scan cursor metadata. Saved SubIQ subscription records are not deleted by Gmail disconnection.

We retain a waitlist email until SubIQ launches, you ask us to remove it, or it is no longer needed for launch communication.

• You can delete individual subscription records from within SubIQ.
• To disconnect Gmail and delete its scan data, open Find from Gmail, select Disconnect Gmail for the account, and confirm. You may also email [email protected] for help.
• If you use a Google-linked account, you can delete it from Settings > Account > Delete Account or follow the external request steps in the account deletion section.
• Deleted information may remain temporarily in backups, logs, or records retained for security, fraud prevention, dispute resolution, or legal obligations.

Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information associated with you. You can:

• Edit or delete subscription records in the app.
• Change currency, theme, and available app preferences in Settings.
• Disable reminders in SubIQ or notification permission in device settings.
• Contact [email protected] to ask about access, correction, deletion, or another privacy request.
• Disconnect Gmail in SubIQ to revoke access and delete Gmail scan data. Removing SubIQ from your Google Account permissions stops future access but does not by itself submit a deletion request to SubIQ.
• Ask [email protected] to remove your email from the launch waitlist or stop launch updates.
• Block or delete analytics cookies using your browser settings, or use the Google Analytics Opt-out Browser Add-on. Blocking analytics does not prevent you from using the SubIQ website.

Data Security and International Processing

We use reasonable technical and organizational safeguards designed to protect your information. No electronic transmission or storage method is completely secure, so we cannot guarantee absolute security. Our providers may process information in countries other than your own, subject to applicable safeguards and legal requirements.

Children's Privacy

SubIQ is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through SubIQ, contact us so we can investigate and delete it where appropriate.

Changes to This Privacy Policy

We may update this Privacy Policy as SubIQ changes or to reflect legal, regulatory, or operational requirements. We will post the revised policy on this page and update the effective date.