Privacy Policy

Every subscription you track stays on your device. We have no accounts, no servers of our own, and no way to read what you track. The app does send anonymous crash and usage data so we can fix bugs, and you can turn that off in Settings.

Plain-English Summary

Your Subscription Data

Never leaves your device. Names, amounts, dates and notes are stored only on your phone. We cannot see them.

What We Do Collect

Anonymous usage and crash data. Counts and flags only, never your subscription names, exact amounts or typed text.

What We Share

Nothing is sold. Telemetry goes only to our two service providers, PostHog and RevenueCat, acting on our behalf.

Your Control

Turn analytics off in Settings at any time. Export everything as JSON, or delete it all, whenever you like.

Full Privacy Policy

Effective: February 4, 2026
Last updated: September 13, 2026

1. Introduction

CustomSubs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application (the "App") handles your information.

The short version: your subscription data, every name, amount, date and note you enter, stays on your device always. We have no accounts, no servers of our own, and no way to read what you track. The app does send anonymous, aggregate usage statistics and crash reports so we can fix bugs and improve it. That telemetry never includes your subscription details, and you can turn it off in Settings at any time.

2. Two Kinds of Data, Treated Completely Differently

The distinction below is the whole point of this policy. One category is structurally incapable of reaching us. The other is deliberately anonymous and is yours to switch off.

  • Your subscription data never leaves your device. See section 3.
  • Anonymous telemetry is sent so we can find crashes and see which features get used. See section 4.

3. Your Subscription Data: Never Leaves Your Device

Everything you enter into CustomSubs is stored exclusively on your device, in a local database (Hive):

  • Subscription names, amounts and billing cycles
  • Reminder settings and notification preferences
  • Cancellation information (URLs, phone numbers, notes)
  • Custom notes and settings

None of this is transmitted to us or to anyone else. We cannot see it, back it up, or recover it. The only way it leaves your device is when you export a backup and choose where to send it.

4. Anonymous Telemetry: What We Do Collect

To find crashes and understand which features are used, the App sends limited, anonymous telemetry to PostHog (a product-analytics service; data is processed on PostHog's US cloud) and initializes the RevenueCat SDK for anonymous install metrics. Concretely:

  • Usage events such as "a subscription was created," "the calendar was opened," or "a CSV import ran." These carry counts and flags only, never subscription names, exact amounts, or any text you typed.
  • Aggregate figures carried on those events, such as how many subscriptions you track and your monthly spend as a broad bucket (for example "25-50"), never an exact figure. We build no profile of you: these ride individual events and are not written to a stored per-device record.
  • Crash and error reports, meaning stack traces plus device model, OS version and app version when something breaks.
  • An anonymous identifier, a randomly generated ID that is not your name, email, phone number, advertising ID, or any account (there are no accounts). We never call any "identify" function and never link telemetry to a real-world identity. The Android build explicitly strips the advertising-ID permission.

Your control: Settings → "Share Anonymous Usage Data" turns analytics off. Opting out stops usage events, and the toggle is honored on every launch.

What we still do not do:

  • No personal information, so no names, emails, phone numbers or accounts
  • No access to your bank accounts, emails, or other apps
  • No advertisements, and no advertising identifiers
  • No sale or sharing of data with data brokers
  • No tracking across other companies' apps or websites
  • No transmission of your subscription details, ever

5. Notifications

CustomSubs uses your device's native notification system to schedule local reminders. Notification content is generated on your device and is never transmitted. On Android we additionally declare the "Alarms & reminders" capability so reminders can fire at the exact minute you chose; if you decline it, reminders still fire with minor timing drift.

6. Backup and Export

You can export your subscription data as a JSON file at any time. The file is created locally on your device and can be saved to:

  • Your device's local storage
  • iCloud Drive (iOS) or Google Drive (Android)
  • Email, sent from your device's email app
  • Any other app that accepts file sharing

We do not receive, access, or store any backup files. The export is created and shared entirely on your device. On Android, system auto-backup is disabled, so your database is not copied to Google Drive automatically; the in-app export is the only backup path.

Important: if you uninstall the app without exporting first, your subscription data is permanently lost. We never had a copy.

7. Third-Party Services

The App includes exactly two outbound services, both acting as our service providers:

  • PostHog (analytics and crash reporting) receives the anonymous telemetry described in section 4. Subject to the opt-out.
  • RevenueCat (install metrics) initializes for anonymous install and usage counting. The app is completely free and no purchases are processed.

There are no advertising networks, no social media SDKs, and no cloud-storage integration beyond your own share sheet.

8. App Permissions

CustomSubs requests the following permissions:

  • Notifications: to send you reminders about upcoming subscription charges
  • Alarms & reminders (Android): so reminders fire at the exact minute you chose
  • Storage / share sheet: used only when you explicitly export or import a backup
  • Internet: used only to send the anonymous telemetry described in section 4

We do NOT request permissions for:

  • Camera or microphone
  • Photo library
  • Contacts or calendar
  • Location services
  • Your device's advertising identifier

9. Children's Privacy

We collect no personal information from anyone, including children. The anonymous telemetry described above contains no personal data. The app is designed for people who pay for subscriptions, which typically means adults or teens with parental permission.

10. Data Security

  • Your subscription database is on-device only, protected by OS sandboxing and your device's encryption and passcode or biometric lock.
  • Telemetry in transit is encrypted via HTTPS/TLS.
  • Exports are unencrypted JSON for portability. You control where the file goes; if you store it in a cloud service, that service's policies apply.

Because we hold no database of your subscriptions, there is no server-side store of your finances to breach.

11. Your Rights

  • Access: all your subscription data is visible in the app at all times
  • Portability: export everything as human-readable JSON via Settings → Export Backup
  • Deletion: delete any or all data in-app via Settings → Delete All Data, or uninstall the app
  • Objection and opt-out: Settings → "Share Anonymous Usage Data" → off

Telemetry already sent is anonymous and cannot be traced back to you, which also means we cannot locate "your" records in order to delete them on request. Opting out stops future collection.

12. Changes to This Policy

When we make changes we update the "Last updated" date above and publish the new text here. Material changes, such as the September 2026 update that first documented the analytics described above, are called out in the app's release notes. Continued use after an update constitutes acceptance.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: info@customapps.us
Website: customsubs.us
Mail: CustomApps LLC, Boston, Massachusetts

Store Privacy Labels

What we declare in the iOS App Store privacy label and the Google Play Data Safety form, matching the telemetry described in section 4:

  • Collected: app interactions and usage data, crash logs, diagnostics, and an anonymous device identifier
  • Shared with anyone: No
  • Linked to your identity: No
  • Used to track you across apps or websites: No
  • Your subscription contents: Not collected

Technical Transparency

For technically-minded users: all subscription-data operations are local Hive database operations. There is no server API for your content, so leaking it is structurally impossible.

If you monitor network traffic you will observe HTTPS connections to PostHog (us.i.posthog.com) and RevenueCat endpoints, which is the telemetry described in section 4, and nothing else initiated by the app. With analytics opted out, usage events stop. Tapping a cancellation URL or phone number hands off to your browser or phone app, and sharing a backup uses your device's share sheet; those actions are initiated by you and handled by system apps.