Legal

Privacy Policy

Last updated: August 11, 2026

ManageSubs is available on iOS and Android. On both platforms the subscription records you create are stored on your device. The app does not connect to your bank, sell personal data, or show advertising. Separately, the app can send product-usage events to PostHog's EU service, uses RevenueCat to manage purchase and entitlement information, and can request public exchange-rate data for currency conversion. This website also uses PostHog analytics and offers optional email forms. Because the two platforms use different Apple and Google services, this policy describes them separately where their behaviour differs. For a non-legal summary, read the Privacy Overview.

The short version: Your subscription records stay on your device, and any backup goes to your own Apple or Google account rather than to us. Product analytics never include subscription names, prices, notes, or your custom category and family-member names. On Android, analytics are switched off by default and only run if you turn them on in Settings. On iOS, analytics run automatically and the current version does not offer an in-app opt-out. Receipt scanning happens on your device — the images are not uploaded to us.

iOS and Android do not sync with each other. Each platform backs up only within its own ecosystem: iOS to your private iCloud database, Android to your own Google account backup. Installing ManageSubs on a second platform gives you a separate, empty database. Use the app's export and import features to move records between platforms.

Data We Collect

Subscription records

Subscription names, prices, billing cycles, renewal dates, categories, family members, notes, cancellation information, and budget settings are stored locally on your device. These records are never sent to a ManageSubs server.

  • ManageSubs does not operate a server that stores a copy of your subscription database
  • You do not need to provide an account, email address, or password to use the app
  • ManageSubs does not connect to your bank or read your financial transactions
  • Analytics events do not contain subscription names, prices, notes, or your custom category and family-member names

On iOS, records are held in Apple's on-device database. If you enable iCloud sync, they are also stored in your private iCloud / CloudKit database so they can sync across your Apple devices. Apple states that a private CloudKit database is accessible only to the user by default and its data is not visible in the developer portal.

On Android, records are held in an on-device SQLite database. There is no ManageSubs cloud sync on Android. Instead, the app participates in Android Auto Backup and device-to-device transfer, which copy the database into your own Google account backup or directly to your new phone. Two deliberate limits apply:

  • Cloud backup is disabled unless the device supports backup encryption, so app data is not backed up to an unencrypted destination
  • On Android 8.0 and 8.1, which do not expose transport-encryption flags, app data is excluded from backup entirely

Backups are governed by Google's Privacy Policy and your Google account settings. You can disable backup for ManageSubs in your Android system settings.

Receipt scanning

The app can read a subscription price and name from a receipt or screenshot you choose. This text recognition runs on your device — Apple's Vision framework on iOS and Google's on-device ML Kit text recognition on Android. The image is not uploaded to ManageSubs, and it is not sent to a third-party recognition service. Only the values you confirm are saved into your subscription records.

App product analytics

Both apps can send product-usage events to PostHog using its EU endpoint. Events are associated with a randomly generated identifier so that events from the same installation can be grouped over time. This identifier is pseudonymous, not anonymous. It is not your name, email address, Apple ID, or Google account.

Events can include app lifecycle events, screen names, feature actions, subscription and family-member counts, billing-cycle categories, import source and count, paywall triggers, Pro status, share-card settings, and purchase product identifiers. PostHog's SDK may also attach technical app, operating-system, device, network, and diagnostic metadata.

What analytics never contain: subscription names, subscription prices, notes, and the custom names you give categories and family members. These are removed before an event leaves the app.

The two platforms differ in how analytics are switched on:

  • Android — analytics are off by default. Nothing is sent unless you enable Share Anonymous Analytics in Settings, and you can switch it back off at any time. Session replay is disabled, and screen views and deep links are not captured automatically.
  • iOS — analytics are configured automatically when the app launches, and the current version does not provide an in-app control to disable them. You can contact us with an access or deletion request.

ManageSubs does not use these events for third-party advertising or cross-app advertising tracking.

Purchases and entitlements

Payments are processed by the store you bought from — Apple In-App Purchase on iOS and Google Play Billing on Android. ManageSubs does not receive your full payment-card number, billing address, Apple ID password, or Google account password.

Both apps use RevenueCat to retrieve products, complete and restore purchases, and determine whether a ManageSubs Pro entitlement is active. RevenueCat receives purchase history, receipt or transaction information, an SDK-generated customer identifier, and technical information needed to provide that service, as described in RevenueCat's Apple and Google Play privacy guides. To verify Play purchases, RevenueCat is authorised to read order and subscription information for this app from Google Play on our behalf.

A completed-purchase analytics event can send the product identifier to PostHog. It does not send your subscription records.

Exchange-rate requests

For multi-currency totals, version 1.11 can request a public USD exchange-rate table from ExchangeRate-API at open.er-api.com. The request does not include your subscription records, prices, or currency selections. The app caches the latest successful rate table locally and can use an approximate bundled fallback while offline or before a successful refresh. As with other internet requests, the provider can process connection data under its own policies.

Website analytics

This website uses a separate PostHog EU project. It may collect page views, clicks and other page interactions, browser or device information, referring pages, approximate network-derived location, and session identifiers. We use these events to understand site usage and App Store link activity. We do not intentionally attach your in-app subscription database or an email address entered into an email form to website analytics events.

Email (only if you ask for it)

Some website pages let you submit an email address to receive a guide or occasional subscription tips. This is optional and is separate from using the app. MailerLite processes the address and delivery activity for us. We use the address for the messages described by the form, do not sell it, and include an unsubscribe link in marketing emails.

How We Use Data

  • To store and optionally sync the subscription records you create
  • To understand app and website usage and prioritize improvements
  • To investigate bugs, crashes, reliability, and performance
  • To provide, verify, and restore purchases and Pro entitlements
  • To convert recorded amounts into the chosen display currency when you use multi-currency totals
  • To send email content you requested and related tips where permitted

We do not sell personal data, show third-party advertising in the app, or share data with data brokers.

Service Providers

  • Apple iCloud / CloudKit (iOS) — optional storage and synchronization in the user's private iCloud database. See Apple's Privacy Policy.
  • Apple In-App Purchase (iOS) — payment and store transaction processing.
  • Google Play Billing (Android) — payment and store transaction processing. See Google's Privacy Policy.
  • Android Auto Backup (Android) — optional backup and device transfer of the app's database into the user's own Google account, subject to the encryption limits described above. Google processes this under its own policies; ManageSubs cannot read these backups.
  • Google ML Kit (Android) — on-device text recognition for receipt scanning. Images are processed on the device and are not sent to Google or to us for this feature.
  • RevenueCat — purchase-history, receipt or transaction, customer-identifier, technical, and entitlement processing on both platforms. See RevenueCat's Privacy Policy.
  • ExchangeRate-API — public USD exchange-rate table requests for multi-currency conversion. Requests do not include subscription records, prices, or currency selections.
  • PostHog EU — app and website event analytics under the categories described above. See PostHog's Privacy Policy.
  • MailerLite — email subscription and delivery processing when you opt in on the website. See MailerLite's Privacy Policy.

ManageSubs does not integrate a bank-aggregation service, advertising SDK, or social-media advertising tracker.

Storage, Security & Retention

Subscription records are stored on your device. On iOS they are additionally stored in your private iCloud database when sync is enabled; on Android they may be included in your own Google account backup or a device-to-device transfer, subject to the encryption limits described above. The latest successful exchange-rate table is cached locally for conversion. Analytics, where enabled, are stored as event-level data by PostHog's EU service and associated with the pseudonymous identifier described above. Purchase and entitlement data are processed by Apple or Google and by RevenueCat. Optional email data are processed by MailerLite.

We use the access controls and transport protections provided by these services, but no storage or transmission system can be guaranteed completely secure. We do not promise a fixed analytics-retention period. We retain service data only while it is needed for the purposes described above, to operate the service, or to meet applicable legal obligations. You may contact us to request access to or deletion of data we control; additional information may be needed to locate data held under a pseudonymous identifier.

Your Choices & Rights

  • Subscription records — use the app's export and deletion controls for the records on your device. Use Apple's iCloud controls for data stored in iCloud, or your Android system backup settings for data included in a Google account backup
  • App analytics — on Android, turn Share Anonymous Analytics off in Settings at any time. On iOS the current version has no self-service opt-out; contact us about an access or deletion request
  • Email — use the unsubscribe link in an email or contact us to request deletion
  • Purchases — use Apple's or Google Play's purchase-management tools; contact us for a request involving RevenueCat data processed for ManageSubs

Deleting the app removes its local data from that device, but does not by itself delete synced iCloud data, an existing Android backup, analytics events, purchase records, or an email subscription. Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection. These rights can be limited by applicable law and by data we are required to retain.

Children's Privacy

ManageSubs is not directed at children under 13. If you believe a child has provided personal data through the app or website, contact us so we can review the request.

Changes to This Policy

We may update this policy as the app, website, service providers, or applicable requirements change. We will update the "Last updated" date and provide additional notice when appropriate.

Contact

For privacy questions or requests, email vmatusevic@pm.me. Please do not send subscription names, payment details, or other sensitive information by email unless it is necessary for your request.