Privacy Policy

1. Introduction

SubSense (“we,” “our,” “us,” or “the App”) is an Android application that helps users track and manage their recurring subscriptions. We are committed to protecting your privacy and being transparent about how your data is handled.

This Privacy Policy explains what data SubSense collects, how that data is used, where it is stored, and what rights and controls you have over it. By installing and using SubSense, you agree to the practices described in this policy.

SubSense is developed by Akshan Technologies.

2. Data We Collect

2.1 Data Stored Locally on Your Device

The following data is created and stored entirely on your device in a local Room database. This data is never transmitted to our servers or any third party:

• Subscription information — names, amounts, billing dates, billing cycles, categories, and user-added notes.
• Notification scan metadata — source app package name, matched keyword, extracted amount, confidence score, and timestamp. The raw notification text itself is never stored.
• Price history — historical price data points for each tracked subscription.
• User preferences — selected currency, alert settings, theme preferences, and other app configuration choices.

2.2 Data Collected by Third-Party SDKs

• Firebase Analytics (Google) — Collects the Android Advertising ID (AAID), device model, OS version, app version, and aggregated feature-usage event counts. Does not collect your subscription content.
• Firebase Crashlytics (Google) — Collects crash stack traces, device model, OS version, and app state at crash time. Used solely for identifying and fixing bugs.
• Google AdMob — Displays banner and interstitial advertisements. May collect advertising identifiers per Google's advertising privacy policies.

2.3 Data We Do NOT Collect

• Bank account details, credit card numbers, or financial login credentials
• SMS messages (SubSense does not request READ_SMS permission)
• Contacts, photos, location, microphone, or camera data
• Raw notification text (discarded immediately after on-device processing)
• Personal identification information (no account creation required)

3. How We Use Data

4. Notification Access

• Purpose: Automatically detect subscription-related notifications so details can be captured without manual entry.
• On-device processing only: All notification reading and analysis happens entirely on your device. Content is never sent to any external server.
• What is stored: Only extracted metadata (source app package name, matched keyword, extracted amount, confidence score, timestamp).
• What is discarded: Raw notification text is discarded immediately after processing.
• User control: Revoke Notification Access anytime via Android Settings > Apps > Special access > Notification access.
• Not required: SubSense functions fully without Notification Access via manual entry.

5. Data Sharing

We do not sell, trade, rent, or otherwise share your subscription data with any third party. Your subscription information, notification scan metadata, price history, and preferences remain on your device.

Firebase Analytics and Crashlytics data is processed by Google under their respective privacy policies. Google AdMob may use advertising identifiers to serve advertisements. You can opt out via Android Settings > Privacy > Ads.

6. Data Storage and Security

• Local storage: All subscription data is stored on your device using Android's Room persistence library (SQLite).
• Optional backup: SubSense supports Android Auto Backup to your Google Drive (end-to-end encrypted on Android 9+).
• Code protection: Release builds use ProGuard/R8 code obfuscation.
• No remote access: No remote server stores your data, so no remote breach is possible.

7. Data Retention

• Subscription data: Retained until you manually delete it or uninstall the App.
• Notification scan log: Automatically purged after 90 days.
• Price history: Most recent 12 data points per subscription; older points automatically removed.
• Firebase data: Retained per Google's standard retention policies.

8. Your Rights and Controls

• View your data: All data is viewable within the App.
• Export your data: Export as CSV or JSON (Premium feature).
• Delete all data: Settings > Clear All Data.
• Revoke Notification Access: Android Settings > Apps > Special access.
• Opt out of personalized ads: Android Settings > Google > Ads.
• Uninstall: Removes all locally stored data.

9. Children's Privacy

SubSense is not directed at children. Under the India DPDP Act 2023, the age threshold is 18 years. We do not knowingly collect personal data from children under 18. Contact us at support@akshantech.com if you believe a child has provided data through the App.

10. DPDP Act 2023 Compliance (India)

• Local processing: Subscription data processed and stored solely on user's device.
• Transparency: This policy discloses all data collection practices.
• Consent-based: Processing based on explicit in-app consent.
• Right to access: View all data within the App.
• Right to correction: Edit data directly within the App.
• Right to erasure: Settings > Clear All Data, or uninstall.
• Data Fiduciary: Contact at support@akshantech.com.

11. GDPR Compliance (European Economic Area)

Legal Bases for Processing:

• Legitimate interest (Art. 6(1)(f)): Local on-device processing for core functionality.
• Consent (Art. 6(1)(a)): Notification Access granted via system-level permission.

Your Rights Under GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to data portability (Art. 20)
• Right to restriction of processing (Art. 18)
• Right to object (Art. 21)

Data Minimization: Only minimum metadata necessary is stored. Raw notification text is never stored.

For data protection inquiries: support@akshantech.com.

12. CCPA/CPRA Compliance (California)

Categories of Personal Information Collected:

• Identifiers: Android Advertising ID (via Firebase Analytics and AdMob).
• Commercial information: Subscription details (stored locally only).
• Internet activity: App feature usage events (aggregated, no PII).

SubSense does not sell your personal information. You have the right to know, delete, correct, and opt-out per CCPA/CPRA.

13. LGPD Compliance (Brazil)

Legal Bases:

• Consent (Art. 7, I): Via Notification Access permission and app usage.
• Legitimate interest (Art. 7, IX): Local processing for core functionality.

Your rights under LGPD include confirmation, access, correction, anonymization, deletion, data portability, and revocation of consent. Contact: support@akshantech.com.

14. Google Play Policies Compliance

• Data Safety disclosures accurately reflect practices in this policy.
• NotificationListenerService use is disclosed and limited to subscription detection.
• Advertisements comply with Google's advertising policies.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in functionality, SDK updates, or applicable laws. The “Last Updated” date will be revised and a notice posted within the App.

16. Contact Us

If you have any questions about this Privacy Policy or SubSense's data practices:

• Email: support@akshantech.com
• Google Play: SubSense on Google Play