Privacy Policy

Subgroveis built to be privacy-first. This policy explains what we collect, why, and what we never do. In plain terms: we don’t connect to your bank, and we don’t sell your data.

What we collect

• Account information: your email address, an optional display name, and a securely hashed password. We never store your password in plain text.
• Subscription data you enter: the names, amounts, billing cycles, dates, and notes you add. This is data you type in yourself — we do not import it from your bank or card accounts, because we have no access to them.
• Push notification tokens: if you enable reminders, we store the push subscription your browser provides so we can send renewal notifications to your device.
• Payment information: handled entirely by our payment processor, Stripe. We never see or store your full card number. We keep a Stripe customer reference and your plan status.
• Minimal technical data: basic security information such as IP address for rate-limiting and abuse prevention. We do not run third-party advertising trackers.

What we do not do

• We do not link to or access your bank or payment accounts.
• We do not sell, rent, or trade your personal information to anyone.
• We do not use your subscription data for advertising or share it with advertisers.

How we use your data

We use your data only to operate the Service: to authenticate you, store and display your subscriptions, send the reminders you request, and process payments through Stripe. That’s it.

Who we share it with

We share data only with the service providers required to run Subgrove — principally Stripe (payments) and the push-notification services operated by your browser vendor (for delivering reminders). These providers process data on our behalf under their own privacy terms. We may also disclose data if required by law.

Data storage and retention

Your data is stored on our servers for as long as your account is active. On your device, the app also keeps a local copy of your subscriptions so it works offline. When you delete your account, we delete your account data, subscriptions, and push tokens; residual copies may persist in backups for a limited period before being overwritten.

Your rights

You can access and edit your subscription data at any time from your dashboard. You can request deletion of your account and associated data by contacting support@subgrove.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to access, correct, or export your data; we honor these requests.

Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected in the effective date above. Contact us at support@subgrove.com with any privacy questions.

This document is a starting template and is not legal advice. Have it reviewed by a qualified professional for your jurisdiction before launch.