Welcome to SubGate (“App”, “Service”, “we”, “our”, or “us”).
Your privacy and financial security are extremely important to us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have regarding your information when using our subscription management service.
By creating an account or using the Service, you agree to this Privacy Policy.
1. Information We Collect
1.1 Account Information
When you create an account, we may collect:
- Name or display name
- Email address
- Password or authentication credentials
- Profile information you choose to provide
1.2 Financial Account Information
To identify recurring subscriptions, the Service requires access to information from one or more financial accounts.
Depending on your country and financial institution, you may securely connect your bank account using an authorized Open Banking or financial connectivity provider.
The information we may receive includes:
- Account identifiers
- Transaction history
- Merchant names
- Recurring payments
- Subscription merchants
- Payment amounts
- Payment frequency
- Currency
We only request the information necessary to identify, monitor and help manage recurring subscriptions.
When connecting your financial institution, you may be asked to authenticate using your online banking credentials.
Whenever possible, these credentials are entered directly into the secure authentication flow provided by our regulated banking connectivity partner and are not visible to or stored by us.
We do not store your online banking username or password.
1.3 Device Information
We automatically collect limited technical information, including:
- Device model
- Operating system
- App version
- Language settings
- IP address
- Anonymous device identifiers
- Crash reports
- Diagnostic information
1.4 Usage Information
We collect information regarding your use of the Service, including:
- Connected financial institutions
- Features used
- Subscription monitoring activity
- Cancellation-help activity, such as opening a cancellation page or guide
- Login history
- Security events
1.5 Email Account Information (Google User Data)
To find subscription confirmations and receipts, you may choose to connect an email account such as Gmail or Outlook.
If you connect a Gmail account, SubGate accesses your Gmail data through Google’s official APIs using read-only permissions. We scan messages solely to identify subscription-related emails — receipts, renewal notices, trial confirmations, and price-change notifications — and we extract only the details needed to build your subscription list: merchant name, amount, currency, billing period, renewal date, subscription status, and the sender the receipt arrived from.
We do not store the emails themselves. A matched message is read only for as long as it takes to extract those fields, and no part of the message is retained afterwards — no subject lines, no message bodies, no attachments, no message identifiers, and no index of your mailbox. What we retain is the resulting subscription record, not the email it came from.
We do not read, store, or analyze your personal correspondence, and we never use email data for advertising or transfer it to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with prior notice to you.
SubGate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect your email account at any time in the app settings, or revoke SubGate’s access at myaccount.google.com/permissions. Disconnection takes effect immediately: we stop scanning, and we delete the access tokens and the connection record for that mailbox, so we can no longer reach it. As no messages were stored, there is no email content for us to delete.
Subscription records already created from that mailbox remain in your account so that disconnecting does not erase your list. You can delete individual subscriptions at any time, or delete your account to remove all data we hold about you, as described in section 7.
2. How We Use AI to Read Receipts
To find your subscriptions, SubGate needs to understand billing emails, and it uses OpenAI’s API to do that in two steps. First, for every message our search returns, we send the sender address, subject line, date, the short preview snippet Gmail provides, and Gmail’s internal message identifier, so the model can pick out which messages look like billing receipts and tell us which ones it selected. Then, for those messages only, we send an extract of the message body — at most 1,200 characters — and the model returns the service name, amount, currency, billing cycle and renewal date it can identify.
If you connect a bank account, the same applies to card transactions: we send the merchant name, amount, currency, the date of the last charge and how often it has repeated, so the model can tell subscriptions apart from one-off spending. We never send card numbers, account numbers or balances — we do not receive them.
OpenAI is the only third party we send this content to, and we send it only to produce the subscription list you see in the app.
Your email is not used to train AI models. We do not use, transfer or sell data obtained through Google Workspace APIs to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models, and our agreement with OpenAI excludes data sent through their API from being used to train their models.
An extract exists only for as long as the request takes and is not stored on our servers afterwards. What we save is the result: the service name, price, currency, billing cycle and next renewal date.
No human at SubGate reads your email. Access is limited to the automated process described above.
3. How We Use Your Information
We use your information to:
- Identify recurring subscriptions
- Detect subscription price increases
- Notify you of upcoming renewals
- Help you manage subscriptions
- Help you cancel subscriptions yourself
- Provide account security
- Prevent fraud
- Improve the Service
- Respond to customer support requests
- Comply with legal obligations
Helping you cancel means pointing you to the right place: for store-billed subscriptions SubGate opens your App Store or Google Play subscriptions page, otherwise it opens the provider’s own cancellation or account page, and it shows a short guide on where to look. SubGate is read-only. It cannot cancel, pause or modify a subscription, it never contacts a provider on your behalf, and the final step is always yours.
We do not sell your personal information.
We do not sell or rent your financial transaction history.
We do not use your banking information for advertising purposes.
4. Financial Data
Financial transaction information is processed solely to provide subscription identification and management services.
We do not use financial transaction data to make lending, insurance, employment, housing, or credit eligibility decisions.
5. Data Sharing
We only share your information:
- With regulated financial connectivity providers that enable secure bank connections
- With trusted service providers operating on our behalf
- Where required by law
- To investigate fraud or security incidents
- With your consent
Our service providers may only process your information to provide services to us and must protect it appropriately.
6. Data Security
Protecting financial information is a top priority.
We implement industry-standard safeguards including:
- Encryption in transit using TLS
- Encryption of stored data where applicable
- Strong authentication controls
- Access logging
- Security monitoring
- Regular security reviews
- Role-based access controls
We never intentionally expose banking credentials to unauthorized personnel.
Although we employ robust safeguards, no electronic system can guarantee absolute security.
7. Data Retention
We retain personal information only as long as necessary to provide the Service and comply with legal obligations.
If you disconnect a financial institution, we will stop collecting new financial information from that institution.
If you delete your account, your personal information will be deleted or anonymized within a reasonable period, except where retention is legally required or necessary for fraud prevention, security, dispute resolution, or backup purposes.
8. Your Choices
You may:
- Disconnect financial institutions
- Delete your account
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion where permitted by law
- Withdraw consent where processing is based on consent
9. Third-Party Financial Providers
Our Service may use trusted third-party providers to securely connect to financial institutions.
These providers authenticate your bank connection and securely transmit authorized financial information to us.
Their use of your information is governed by their own privacy policies in addition to ours.
10. International Transfers
Your information may be processed in countries other than your own.
Where required, appropriate safeguards are implemented for international data transfers.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Material changes will be communicated through the App or by other appropriate means before they become effective.
12. Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:
Privacy Team
Email: support@subgate.app
Website: https://subgate.app
By using the Service, you acknowledge that you have read and understood this Privacy Policy.