Privacy Policy

SubSift ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using SubSift, you agree to the practices described here.

We collect the following categories of information:

• Account data — your name, email address, and hashed password when you register.
• Subscription data — names, costs, billing cycles, renewal dates, and notes for the subscriptions you add.
• Usage data — pages visited, features used, and error logs collected automatically to improve the service.
• Device & browser data — IP address, browser type, and operating system collected for security and analytics.

We do not collect payment card numbers or process payments directly.

• Provide, operate, and maintain the SubSift service.
• Send renewal reminders and notification alerts you configure.
• Respond to support requests and troubleshoot issues.
• Detect and prevent fraud, abuse, or security threats.
• Analyse aggregate usage trends to improve the product.
• Comply with legal obligations under applicable law.

We do not sell, rent, or trade your personal information to third parties.

SubSift uses a single session cookie (subsift_auth) to authenticate you. No third-party advertising cookies are set. We may use privacy-respecting analytics (e.g., aggregated, non-identifiable usage counts) to understand feature adoption.

We share data only with trusted service providers necessary to operate SubSift (e.g., cloud hosting, email delivery). These providers are contractually obligated to protect your data and may not use it for their own purposes.

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of SubSift, our users, or the public.

We retain your account and subscription data for as long as your account is active. If you delete your account, your data is permanently removed within 30 days, except where retention is required by law.

We implement industry-standard safeguards including encrypted data transmission (TLS), hashed passwords, encryption at rest, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond within 30 days.

Users in the Philippines are covered by the Data Privacy Act of 2012 (Republic Act 10173).

SubSift is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Continued use after changes take effect constitutes acceptance of the updated policy.

Questions or concerns? Contact us at privacy@subsift.app.