SubBill Privacy Policy

This policy explains how SubBill, a subscription and recurring expense tracker (the “App”), handles information. The App does not directly collect payment card numbers, bank account information, or card or bank transaction history, and it does not automatically detect subscriptions.

1. Information we collect and store

Account information

We use Firebase Authentication for sign-in. If you sign in by email, Google Sign-In, or Sign in with Apple, information such as your email address, display name, profile image, authentication provider, and Firebase user ID may be processed. Firebase Authentication handles passwords used for password-based sign-in; the provider does not directly collect or store them.

Information you enter

After authentication, profile information and App data you enter—including subscriptions and recurring expenses, payment history, categories, payment methods, notification settings, and related data—are stored in Google Cloud Firestore. Images you add may be stored in Firebase Storage.

Information on your device

The App stores settings and authentication state on your device and may cache cloud data there. When you export a CSV file, the App creates a file containing payment history or related information in its app storage. The file may remain until the next export overwrites it or the App is removed. If you share it, the file is sent to the destination you select, whose terms and privacy practices then apply.

2. Information sent to external services

Notifications

We use Firebase Cloud Messaging for push notifications. Notification tokens, App, device and OS information, the service name you entered, notification timing, and other information needed to deliver notifications may be processed.

Usage, diagnostics, and configuration

We use Google Firebase Analytics, Crashlytics, and Remote Config to improve quality, investigate failures, and deliver feature configuration. Screen and feature events, App, OS and device information, IP address, crash details, stack traces, and purchase status may be processed. Technical information related to Performance Monitoring or In-App Messaging may also be processed by Firebase SDK components included in the App. We do not intend to send the service names, amounts, notes, or similar content you enter to Analytics.

Advertising and consent

The App displays ads, primarily in the free version, through Google AdMob and mediation partners including InMobi, ironSource, Liftoff Monetize, LINE, and Meta. Where required, consent is managed through Google User Messaging Platform. Advertising identifiers, device information, approximate location inferred from an IP address, ad impressions and interactions, diagnostics, and consent choices may be processed for ad delivery, measurement, and fraud prevention. Depending on your choices, non-personalized or limited ads may be shown.

Purchases and subscriptions

Premium features use Apple App Store or Google Play and RevenueCat. App user IDs, store country or region, product identifiers, purchase, renewal and expiration dates, entitlement status, and related diagnostics are processed to validate and restore purchases, prevent fraud, and provide support. The App does not directly collect your name, payment card number, or bank account information for payment.

Support and feedback

If you submit a support request or feedback, your message and optional email address, together with your Firebase user ID, App version, device and OS information, device identifiers, purchase status, and purchase diagnostics, are sent to the provider's Slack workspace for support and troubleshooting. Submitting a request is optional.

3. Purposes

4. External services

Each provider's terms and privacy policy apply to information processed by its service.

5. Retention and deletion

Information stored on your device remains until you delete it in the App or uninstall the App. CSV files and other exported data are managed at the destination you choose.

Account and cloud data are retained while your account is active and as needed to provide the service, troubleshoot issues, maintain security, and comply with law. When account deletion is completed in the App, deletion is initiated for the authentication account and associated cloud data, including subscriptions, categories, payment history, payment methods, and images. You may also contact us below to request deletion. Backups, logs, and information that must be retained by law may take additional time to delete or may be kept for the necessary period. Information held by external services is retained under each provider's policies.

6. Your choices and rights

You can change permissions for notifications, photos, advertising tracking, and similar features in the App or operating-system settings. Revoking permission may disable the related feature. To exercise rights of access, correction, deletion, restriction, or objection available under applicable law, contact us below.

7. International processing

External services may process information outside your country of residence. Such processing is subject to safeguards offered by those providers and applicable law.

8. Changes to this policy

We may revise this policy when the App, external services, or applicable laws change. Material changes will be announced on this page or in the App where appropriate.

9. Contact

Privacy inquiries about SubBill: tinylabapps@gmail.com

Effective and last updated: