Privacy Policy
Last updated: July 2026
This policy covers the SubOrganizer web app, browser extension, and Android app. For a shorter, principle-level summary, see the Security & Privacy page — this document is the complete, legally-oriented version.
What we collect
Your account email, the subscriptions you add or approve (merchant name, amount, billing cycle, renewal date, category), and app preferences (currency, reminder timing). We do not collect your bank account number, card number, or any payment credentials — SubOrganizer never connects to a bank or payment processor.
Android: Notification access
If you grant the SubOrganizer Android app "Notification access," it reads the title and text of notifications posted by other apps on your device (for example, a banking app's payment alert, or a Gmail preview) entirely on-device. This text is scanned locally for subscription-charge patterns (merchant name, amount, recurring language). Only a small, structured candidate derived from a match — never the raw notification content — is written to a local review queue on your device. Nothing is sent to our servers, and nothing is saved to your account, until you personally approve that candidate in the app's Review screen. You can revoke this permission at any time in Android Settings, which immediately stops all notification reading.
Android: SMS access (optional)
If you separately grant SMS permission, the app reads incoming SMS message bodies on-device, using the same local pattern-matching and local-review-queue process described above — the raw SMS text is never transmitted anywhere or stored on our servers. This permission is optional, off by default, and can be revoked in Android Settings at any time. Depending on how you obtained the app, this permission may not be requested at all (see the app's distribution notes).
Browser extension
The browser extension reads the text of the web page you are currently viewing to detect checkout, billing, and confirmation pages, entirely within your browser. As with the Android app, only a structured draft is ever synced to your account, and only after you approve it.
How your data is stored and protected
Data is stored in a Postgres database (via Supabase) with row-level security enforced at the database layer, scoping every row to your account. Connections are encrypted in transit. We do not sell, rent, or share your personal data with third parties for advertising purposes.
Deleting your data
You can delete individual subscriptions at any time from the app. To delete your account and all associated data entirely, contact us using the email associated with your account — deletion is permanent and cannot be undone.
Contact
Questions about this policy or your data can be sent to the support contact listed in the app.