1Overview
Subcycle ("we", "us", "our"), operated by Ayub Hussein, provides an app that helps you track and manage your recurring subscriptions. We take the privacy of your financial information seriously, and we collect only what we need to make the product work.
By using Subcycle, you agree to the practices described in this policy. If you don't agree, please don't use the app.
2Information we collect
Account information
When you sign in with Google or Apple, we receive your name and email address (or Apple's private relay address) to create and secure your account. We do not receive your password.
Financial & subscription data
If you connect a bank account through Plaid, we receive account details and transaction history used to detect recurring charges. You can also add subscriptions manually, in which case we store the name, price, billing cycle, and dates you enter.
Purchase data
If you upgrade to Subcycle Premium, RevenueCat and the app stores provide receipt and entitlement information so we can grant and sync your access. We never receive your full card number.
Usage & device data
To keep the app reliable, we collect basic technical data such as device type, operating system version, app version, and crash diagnostics.
3How we use your information
- To provide the service — detect subscriptions, calculate totals, and show upcoming bills.
- To manage your account — authenticate you and keep your data in sync across devices.
- To process memberships — grant and restore Subcycle Premium access.
- To improve and secure the app — diagnose crashes, prevent abuse, and understand which features are useful.
- To communicate with you — respond to support requests and send important service notices.
We do not use your financial data for advertising, and we do not sell it.
4Connected services & subprocessors
Subcycle relies on the following trusted providers. Each receives only the data needed to perform its function and is contractually required to protect it.
Plaid — securely connects to your bank to retrieve account and transaction data. Your bank login credentials are entered directly with Plaid and your bank; we never see or store them.
Google & Apple — provide sign-in. We receive only your basic profile (name and email). We have no access to your email content, files, or other account data.
RevenueCat — manages subscription purchases and entitlements using receipt data and an anonymous user identifier. Payment is processed by Apple's App Store or Google Play.
Cloud infrastructure providers — host our application, database, and file storage. They store data encrypted on our behalf and do not use it for their own purposes.
5How your data is stored & secured
- All data is encrypted in transit using TLS and encrypted at rest.
- Access tokens and sensitive identifiers are stored in managed, access-controlled systems.
- Access to production data is limited to authorized personnel and logged.
- We maintain automated backups to protect against data loss.
No system is perfectly secure, but we work to protect your information using industry-standard practices.
6Sharing & disclosure
We share your information only in these limited cases:
- With the subprocessors above, to operate the service.
- For legal reasons, if required by law or to protect rights, safety, and the integrity of the service.
- In a business transfer, such as a merger or acquisition, with notice to you.
We never sell your personal or financial data to third parties.
7Data retention
We keep your data while your account is active. When you delete your account, we delete or anonymize your personal data, except where we're required to retain certain records for legal or accounting purposes. Disconnecting a bank account removes the associated connection promptly.
8Your rights & choices
- Access & export — request a copy of your data, or export it from the app.
- Correction — edit subscription details and account info directly.
- Deletion — delete your account and associated data from within the app.
- Disconnect — unlink any connected bank account at any time.
- Withdraw consent — stop using connected services whenever you wish.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. Contact us to exercise them.
9Children's privacy
Subcycle is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we'll remove it.
10International data transfers
Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards — such as standard contractual clauses — to protect it during these transfers.
11Changes to this policy
We may update this policy from time to time. When we make material changes, we'll update the date above and, where appropriate, notify you in the app.