Privacy Policy

Effective November 9, 2026

Subbo is a subscription and recurring-bill manager for iPhone. You record your subscriptions, prices and renewal dates, and you can ask Pulse, an AI assistant, for help. This policy explains what information the app handles, where it is sent and how long it is kept. Subbo is made by an individual developer, referred to here as “we”.

In short

• Your subscriptions, budget and settings are stored on your iPhone. We do not receive, back up or sync them.
• Sign-in in the current version happens entirely on your iPhone. Nothing about your account is sent to us, Apple or Google.
• Pulse is optional. Only after you agree does the app send your messages and, unless you turn it off, a summary of your subscriptions to our server, which uses DeepSeek to write the answer.
• No advertising, no tracking across other companies’ apps or websites, no analytics, and no sale of data.

Data kept on your device

Each account has a private database in the app’s storage on your iPhone. It holds your subscriptions (name, category, icon and color, price and currency, billing cycle, first billing date, free-trial end, status, payment method label, reminder setting, manage / cancel link and notes), your base currency, monthly budget, exchange-rate table and reminder preferences. It also holds Pulse’s conversation, including small thumbnails of photos you attached, savings tips and a record of what Pulse saved for you. Several people can use separate accounts on one device, and each account sees only its own data. A new account starts with sample subscriptions that you can edit or delete.

The app also stores the following in its settings on your iPhone:

• the profile of each account used on the device: account id, display name, email address, sign-in method and the date it was created;
• for email accounts, a salted SHA-256 hash of the password (never the password itself);
• which account is signed in;
• for each account, whether you consented to Pulse, whether “Share my subscriptions” is on, and whether you have seen the Pulse tour.

CSV files you export with Settings › Data › Export CSV go only where you choose to save or share them. They include notes and payment method labels.

Signing in

You can continue with Apple, with Google or with an email address. In the current version of the app, all three are handled on your iPhone:

• Apple and Google: the app creates a local account on this device. It does not contact Apple or Google and does not receive your Apple ID or Google account details.
• Email: the name, email address and password you enter are checked and stored on this device as described above. They are not sent to us or anyone else.

If a future version uses Apple’s or Google’s sign-in services or a server account, we will update this policy before it does.

Pulse, the AI assistant

Pulse is optional and runs only when you ask it something. Before the first request on each account, the app shows a consent screen that explains what is sent and names DeepSeek as the AI provider. If you choose Not Now, nothing is sent. Each request sends the following to our server:

• the most recent messages of your current Pulse conversation (up to 16, including Pulse’s replies);
• unless you turn off “Share my subscriptions”, a summary of your data: base currency and exchange rates; totals such as monthly and yearly spend, charges this month and in the next 30 days, budget and budget use, and amounts saved by cancelling; your active, paused and cancelled subscriptions with name, category, price, currency, billing cycle and relevant dates; up to 15 upcoming renewals; and the titles and amounts of savings tips. Notes and payment methods are never sent;
• for photos you attach (up to four), the text and image labels found on your iPhone by Apple’s Vision framework. The photo itself is never sent;
• your account id on this device, which our server uses to apply a daily message limit.

Our server sends the conversation, subscription summary and photo text to DeepSeek, which generates Pulse’s answer. DeepSeek acts as our AI provider and processes this data under its own terms. Our server returns the answer to the app and does not store your messages, subscription summary or Pulse’s answers in a file or database. Its technical log records a shortened form of your account id, the response time and the number of suggestions returned. If DeepSeek returns an answer the server cannot read, the log may include the first 160 characters of that answer for troubleshooting.

Pulse can save what it suggests to your wallet, such as new subscriptions or savings tips. These changes happen only on your device, and you can undo the latest one.

In Settings › AI & Privacy you can turn off “Share my subscriptions”, clear the Pulse chat, and withdraw your consent. After you withdraw consent, the app asks again before sending anything.

Photos and permissions

• Photos: you attach a photo, such as a receipt, with the iOS photo picker. The app sees only the photos you pick, so it does not ask for access to your photo library. It does not use the camera. Each photo is read on your iPhone; a small thumbnail is kept with the conversation on your device.
• Notifications: the app asks for permission only when you turn on renewal reminders. Reminders are local notifications scheduled on your iPhone; their content, such as the subscription name, price and payment method label, is not sent anywhere.

Other network use

Pulse is the only feature that connects to the internet. Exchange rates are kept in a table you maintain on your device and are never downloaded. If you save a manage / cancel link for a subscription and tap it, the page opens in your browser and is governed by that website’s own policy.

What we don’t do

• No advertising and no advertising identifiers.
• No tracking across other companies’ apps or websites, no analytics SDKs, and no sharing with data brokers.
• We don’t sell your data.
• Your subscription list is not uploaded to us. Only the summary described above is sent with Pulse requests.

Our server and providers

Like any online service, our server and its hosting and network providers receive your IP address when the app connects to them. Pulse answers are generated by DeepSeek.

International processing

Our server and DeepSeek may be located outside your country. DeepSeek is based in China and may process Pulse requests there. By using Pulse after giving consent, you understand that this data is transferred to and processed in those countries.

How long data is kept

• On your device: until you delete it, delete the account in the app, or delete the app.
• Pulse requests: our server does not keep them after the answer is returned, apart from the limited log lines described above.
• Pulse’s daily message counts: held only in our server’s memory and reset when it restarts.
• Data received by DeepSeek: under DeepSeek’s own policies.

Deleting your data

Settings › Account › Delete Account removes from this iPhone the account and its database: subscriptions, budget and exchange rates, reminders, Pulse conversation and savings tips. It also cancels that account’s scheduled reminders. Your Pulse consent choices for that account stay in the app’s settings until you delete the app. Deleting the app removes everything the app stored on the device. See Account deletion.

Your choices and rights

You can view, edit, export and delete your data in the app at any time. Depending on where you live, you may have rights to access, correct or delete personal data, or to object to its processing. Because we don’t hold an account or your subscription data, most requests can be completed in the app. For anything else, email leminhtri6953@icloud.com.

Children

Subbo is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy as the app changes. The effective date at the top shows when it was last updated.

Contact

Questions or requests: leminhtri6953@icloud.com.