← Back

Privacy Policy

Last updated: 9 May 2026

Subscurate is built by an independent developer. Privacy isn't a marketing slogan here — the app is designed to need as little of your information as possible.

This policy explains what Subscurate does and doesn't do with the data you put into it.

The short version

Subscurate stores everything you enter (subscriptions, bills, intentions, notes, icons) on your device and in your own iCloud account. Apple's CloudKit handles the sync; the developer never sees your data.
Subscurate does not have its own account system. No sign-in, no password, no profile to manage. The only account in play is the iCloud account already on your device.
Subscurate does not send your subscription data to any third-party server.
Subscurate uses privacy-first analytics (TelemetryDeck) to collect privacy-preserving, non-identifying app-usage events — for example, that the app launched or that a subscription was added. No subscription names, amounts, intentions, or personal data are included. The client identifier is a one-way hash of your device's vendor ID; it is not linked to you, your name, or any account.
Aside from iCloud sync (Apple's CloudKit framework, against your own iCloud account) and StoreKit's standard App Store calls, the app makes two types of outbound network request: (1) fetching public currency exchange rates from api.frankfurter.app — currency codes only, no personal data; and (2) sending anonymous, non-identifying analytics events to TelemetryDeck's servers.
Notifications are scheduled and delivered locally on your device via iOS. There is no push server.

Information Subscurate collects

Subscurate does not collect the subscription, billing, or personal details you enter into the app. The only data leaving your device on the developer's behalf is the anonymous, non-identifying analytics described under Analytics, advertising, and tracking below.

Anything you enter into the app — names of services, billing amounts, dates, intentions, notes, custom icons from your photo library — is stored on your device using Apple's SwiftData framework, and synced through Apple's CloudKit to your other iPhones that are signed in to the same iCloud account. The developer has no access to it; CloudKit data sits in your private iCloud database, not in any server the developer operates.

Network requests

Beyond iCloud sync (Apple's CloudKit framework, against your own iCloud account) and StoreKit's standard App Store purchase checks, Subscurate makes outbound network requests for two reasons, both described below: refreshing exchange rates and sending privacy-preserving analytics events.

Exchange rates

Endpoint: https://api.frankfurter.app/latest
Provider: Frankfurter, an open-source service hosted at frankfurter.app
What is sent: the currency codes used in your subscriptions (for example: from=GBP&to=USD,EUR). No user identifier, device identifier, IP-based personalisation, or subscription data.
What is received: numeric exchange rates.

If the request fails, Subscurate continues working with whatever rates were last fetched (or the manual rates you set in Settings). It never blocks the app.

You can avoid this request entirely by setting exchange rates manually in Settings.

Analytics events

Endpoint: TelemetryDeck (https://nom.telemetrydeck.com)
Provider: TelemetryDeck, a privacy-first analytics service for indie developers, based in the EU.
What is sent: the event name (for example appLaunched or itemAdded), the app version, the platform (iOS), and a SHA-256 hash of identifierForVendor as the client identifier. No subscription names, amounts, intentions, notes, or personal data.
What is received: a small acknowledgement; nothing that affects app behaviour.

This is described in more detail under Analytics, advertising, and tracking below.

Photos and icons

If you choose a custom icon for a subscription, Subscurate uses Apple's PhotosPicker to let you pick a single image from your photo library. The chosen image is downscaled to a small thumbnail and stored locally inside the subscription record on your device.

Subscurate does not request full photo library access — PhotosPicker is a system-provided picker that hands the app only the image you selected.
Picked images are not uploaded anywhere.

Notifications

If you grant notification permission, Subscurate schedules local notifications on your device for:

Renewal reminders for subscriptions and bills (the day(s) before a renewal, at 09:00).
Trial ending reminders (the day(s) before a trial converts to paid, at 09:00).

These are scheduled and delivered entirely on-device by iOS. No notification data is sent to a server. You can turn notifications off at any time in Settings or in iOS Settings → Notifications → Subscurate.

Analytics, advertising, and tracking

Subscurate uses TelemetryDeck, a privacy-first analytics service built for indie iOS developers. It receives privacy-preserving, non-identifying app-usage signals — for example, that the app launched, or that a subscription was added. It does not receive subscription names, amounts, intentions, or any personal data.

Client identifier: a SHA-256 hash of your device's vendor identifier (identifierForVendor). This is not your name, email, or Apple ID, and it cannot be reversed to identify you.
Not linked to identity. TelemetryDeck is designed around anonymous aggregates, not individual user profiles.
Not for advertising or cross-app tracking. The data is used only to understand which features are used and whether the app is working well. It is not shared with advertisers.

The app contains no advertising SDKs and does no cross-app or cross-website tracking. It does not present the App Tracking Transparency prompt.

Children

Subscurate is a personal finance organisation tool intended for adults. It is not directed at children under 13, and it does not knowingly collect any personal information from anyone, of any age. The privacy-preserving analytics described above contain no personal data and are not linked to identity.

Your data, your control

Because your data lives on your device and in your own iCloud account:

To export it: future versions will include an export feature. In the current release, your data lives in the app's container on your device and your private CloudKit database in iCloud.
To delete it: delete items inside the app first so the deletions sync to your other iPhones via iCloud. To wipe Subscurate's iCloud copy entirely, go to Settings → [Your Name] → iCloud → Manage Account Storage → Subscurate and delete its data. Deleting the app from a device removes the local copy on that device only.
There is no developer-controlled server-side data to request, modify, or delete. All sync is handled by Apple's CloudKit between your iPhones and your private iCloud account.

Changes to this policy

If this policy ever changes, the new version will be posted at the same URL and the "Last updated" date at the top will be updated. Changes will be summarised in the app's release notes when they affect what data the app handles.

Contact

If you have a privacy question, email hello@subscurate.com.