This policy explains what data the Subscribed iOS app and its web dashboard process, why, who it is shared with and what your rights are. If you use the app without an account, the subscriptions you enter stay on your device.
The data controller is Andrea Montinovo, developer of Subscribed. You can send any privacy request to [email protected].
Without an account, the subscriptions, notes and images you enter are stored only on your device. If you turn on automatic backup, a copy of the app's database is saved to your personal iCloud, managed by Apple: we have no access to it.
If you sign in with Apple or with email and password, we create an account and store on our servers: your email (including the private relay address provided by Apple, if you choose it), your Apple ID identifier for Subscribed, your password in hashed form if you set one, your subscriptions and their details (name, price, currency, billing cycle, dates, category, notes and custom images), your app settings and your active sessions (client type, user agent, IP address and sign-in dates). We use this data to sync your subscriptions across your devices and show them in the web dashboard. Sync only starts after you sign in.
To run the app we rely on these providers, which process data on our behalf or as independent controllers under their own policies: • Apple: Sign in with Apple, in-app purchases, iCloud backup. • RevenueCat: purchase and Plus subscription management (anonymous user identifier and purchase history). • Superwall: purchase screens. • OneSignal: push notifications (device identifier for notifications). • Google Firebase (Google Analytics for Firebase) and Google Ads: anonymous or pseudonymous usage statistics and ad campaign measurement. • Our own analytics (analytics.montinovo.com): aggregated usage events, with no subscription data. • Cloudflare: content delivery network and storage for custom images. • Our backend servers in the European Union. • NewsAPI: news about services is requested by our servers using only the service name, with no personal data. Some of these providers may process data outside the European Union; in that case transfers rely on the safeguards required by the GDPR, such as standard contractual clauses.
• Providing the app, the account, sync and the web dashboard: performance of the service you requested (Art. 6(1)(b) GDPR). • Managing purchases and the Plus subscription: performance of the contract. • Sending reminders and notifications: performance of the service; you can turn them off in iOS settings. • Security, abuse prevention and troubleshooting: legitimate interest. • Usage statistics and campaign measurement: legitimate interest in improving the app. We do not sell your data and we do not use your subscription data for advertising.
Account data is kept for as long as the account exists. You can delete it at any time from the app (Settings → Account e sync → Delete account) or from the web dashboard: your account, subscriptions, images, settings and sessions are deleted from our servers and Sign in with Apple access is revoked. Data stored only on your device is removed when you delete the app; iCloud backups are managed from your iCloud settings.
You can ask to access, correct or delete your data, restrict or object to its processing, and receive it in a portable format: the web dashboard already lets you export your account, settings and subscriptions as a JSON file. For any other request, write to [email protected]. You also have the right to lodge a complaint with your data protection authority.
Communication with our servers is encrypted (HTTPS), passwords are stored only in hashed form and server access is restricted. Sessions expire and you can end them at any time from your account.
Subscribed is not directed at children under 14 and we do not knowingly collect their data.
We may update this policy when the app or the services we use change. The date of the last update is shown below; we will let you know in the app about significant changes.
For questions about this policy, write to [email protected].
Last updated: October 24, 2026