Subkept is a subscription tracking service operated by an independent developer. The service is accessible at subkept.com. For privacy-related enquiries, contact [email protected]. References to 'we', 'us', or 'our' in this policy refer to the operator of Subkept.
We collect your email address when you create an account, used solely for authentication and to send renewal reminder notifications you have configured. We collect subscription data that you manually enter into the app, including service names, prices, billing cycles, start dates, and optional notes. We do not collect payment information. All payments are processed directly by our payment processor and we receive only a confirmation of successful payment. We may store basic session data such as login timestamps to maintain account security.
Your email is used to authenticate your account and to send the specific reminder notifications you enable in your settings. Your subscription data powers the dashboard, spending summaries, trial countdowns, and reminder system, and we do not sell the subscription records you enter. We do not use the personal data you provide for profiling or AI training. To keep Subkept free, the site displays third-party advertising and uses analytics; these services set cookies and may collect usage and device data, as described in 'Cookies and local storage' and 'Third-party services' below.
If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are: (a) contractual necessity, because we need your email and subscription data to provide the service you signed up for; (b) consent, for optional email notifications, which you can enable or disable at any time in your account settings; and (c) legitimate interests, to maintain the security and integrity of the service.
Data is stored on Supabase infrastructure. We retain your personal data for as long as your account remains active. If you delete your account, all associated data is permanently removed from our systems within 30 days. We do not retain backup copies of deleted account data beyond this period.
Subkept uses cookies and similar technologies for several purposes: (1) strictly necessary session cookies that maintain your authenticated login state; (2) analytics cookies set by Google Analytics, which help us understand how the site is used; and (3) advertising cookies set by Google AdSense and its partners, used to serve and, where permitted, personalize ads and to measure their performance. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising through Google Ads Settings (adssettings.google.com) and the controls at aboutads.info, and you can manage or block cookies in your browser. Where the law requires it, we ask for your consent before setting non-essential cookies.
We use the following third-party services to operate Subkept: (1) Supabase, for database and authentication infrastructure; (2) a payment processor (such as Polar, Paddle, or Lemon Squeezy), used to securely process subscription payments — we never see or store your payment card details; (3) Google Analytics, for aggregate measurement of how the site is used; and (4) Google AdSense, which serves third-party advertising on the site. Google may use cookies and device identifiers to provide, personalize, and measure ads and analytics; see Google's information for partner sites (policies.google.com/technologies/partner-sites) for how Google processes this data. Each provider maintains its own privacy policy and security standards.
If you are a resident of the EEA or UK, you have the following rights regarding your personal data: Right of access: you may request a copy of the data we hold about you. Right to rectification: you may update your data at any time within the app. Right to erasure: you may delete your account and all associated data at any time via the app settings. Right to data portability: you may export your subscription data as a CSV at any time from your dashboard. Right to restriction: you may request that we limit how we process your data. Right to object: you may opt out of non-essential communications at any time. To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.
We use industry-standard security practices including row-level security on all database tables, HTTPS encryption for all data in transit, and secure authentication managed by Supabase Auth. While no internet-based service can guarantee absolute security, we take reasonable and appropriate precautions to protect your data.
Subkept is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a minor has created an account, contact us at [email protected] and we will promptly delete the account and associated data.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice within the app before the changes take effect. Continued use of the service after changes constitutes your acceptance of the updated policy.
For any privacy questions, data subject requests, or concerns, contact us at [email protected]. We aim to respond to all privacy enquiries within 5 business days.