Privacy Policy

Effective 2026-05-15 · Subkeep 1.0

Subkeep ("the app") is an iOS subscription tracker built by Zhang Jiahao ("we"). This is the simplest privacy policy we could write that is also true: Subkeep does not collect any personal data.

1. What Subkeep stores, where it stores it

Everything you enter into Subkeep — the subscriptions you track, your reminder preferences, your App Lock setting, your base currency — is stored locally on your iPhone using Apple's SwiftData framework. If you enable iCloud sync (Pro+ feature, off by default), a copy is also stored in your own private iCloud database, end-to-end encrypted by Apple. Subkeep itself never has a copy.

2. What Subkeep does not do

• Subkeep does not contact any server we operate. We do not operate a server.
• Subkeep does not link to your bank account, your credit card, or any aggregator (such as Plaid).
• Subkeep does not embed any analytics SDK (no Firebase, Mixpanel, Amplitude, Sentry, Crashlytics, etc.), advertising SDK, attribution SDK, or feature-flag SDK.
• Subkeep does not request the Apple advertising identifier (IDFA) and does not present an App Tracking Transparency prompt.
• Subkeep does not share your subscriptions, your import results, or any other in-app data with anyone.

3. Permissions

• Photos. Requested only the first time you tap "Scan email screenshot." Used to read the image you pick so Subkeep can recognise a subscription on-device via Apple Vision. The image and the recognised text never leave your phone.
• Camera. Requested only if you use the camera to capture a receipt directly. Same on-device flow.
• Face ID. Requested only if you enable App Lock in Settings. Used to unlock the subscription list. Subkeep never sees your biometric data — Apple performs the match locally.
• Notifications. Requested on first launch. Used to deliver renewal reminders as local notifications. No push, no remote payload, no server is involved.

Subkeep does not request HealthKit, Location, Contacts, Calendar, Microphone, Speech recognition, or motion data.

4. .mbox and email screenshot imports

When you import a Gmail .mbox file, Subkeep reads it from the URL you supplied (via the iOS file picker), parses it with a regex pipeline inside the app's sandbox, and extracts subscription candidates. The .mbox file's contents are never transmitted off the device. Subkeep does not retain the raw email bodies after the parse — only the extracted subscription records you confirm.

5. Network traffic at runtime

The complete set of network calls Subkeep makes at runtime is:

1. Apple's StoreKit 2 handshake for subscription purchase and entitlement verification.
2. Apple's CloudKit handshake, only if you enable iCloud sync (Pro+).
3. A UIApplication.open(_:) to a provider's cancellation page in Safari — only when you tap "Open cancellation page" on a subscription detail screen.

There is no other network surface. No analytics ping. No update check. No remote configuration. No telemetry.

6. Children

Subkeep is rated 4+ and does not knowingly collect personal data from anyone — including children — because it does not collect personal data at all.

7. Changes to this policy

If we ever change anything that affects what data the app handles, we will update this page and bump the app's version number. Material changes will be summarised in the "What's New" section of the App Store listing.

8. Contact

Questions, concerns, or audit requests: jasperabundant@gmail.com.

← Back to Subkeep