SubPuffin Privacy Policy

1. About this policy

This Privacy Policy explains how SubPuffin collects, uses, retains, shares and protects information about you, and how you can manage that information. It applies to the SubPuffin application and related websites and support services provided by the operator identified above.

SubPuffin’s current features include manual subscription entry, a subscription list, renewal reminders, billing and spending dashboards, and optional Gmail-based subscription discovery. Gmail discovery is enabled only after you connect your mailbox and grant read-only access. Bank connectivity and cancellation assistance are offered only where available and require separate authorization.

2. Information processed by current features

Subscription information you enter. We process service names, amounts, currencies, billing cycles, payment or renewal dates, categories, statuses and notes to create subscription records and calculate billing and spending summaries.

Account and support information. The current release supports Google Sign-In and email/password accounts. We process your account identifier, email address and basic profile information made available by the sign-in provider, together with authentication and session tokens needed to maintain your login. We do not receive your Google Account password. Apple Sign-In may be added in the future.

Gmail data. When you choose to connect Gmail, we request read-only access through Google’s OAuth process. We process the authorized Gmail address, message senders, recipients, subject lines, dates, message identifiers, and the parts of message content needed to identify subscription receipts and renewal notices. We use this information only to extract subscription details such as provider, amount, currency, billing cycle, renewal date, and subscription status, and to let you review and import the results. We do not request Gmail send, delete, archive, or modify permissions for this feature.

Other email connections. If you connect iCloud Mail or Yahoo Mail, you provide an app-specific password and email address. We use them only to authenticate to the relevant IMAP service, retrieve messages for subscription discovery, and maintain the connection. App-specific passwords are stored encrypted on the server, are not written to application logs, and are deleted when you disconnect the mailbox.

Usage and analytics information. We use Firebase Analytics to collect app interaction events, device and app information, and approximate region. We do not send Gmail message content to Firebase Analytics. Firebase processes analytics data under its own terms and retention settings. Tencent Cloud may process limited technical logs, such as IP address and request timestamps, as necessary to deliver, secure and troubleshoot the Services.

Storage arrangements. Subscription and account data are stored on Tencent Cloud. Records entered in the app are synchronized to your account so they remain available after you sign in again. Gmail OAuth tokens and email connection credentials are stored encrypted on the server and are not exposed to the mobile app.

Please do not provide passwords, full payment-card numbers or unrelated sensitive information in subscription notes or support messages.

3. How we use information

We use relevant information, according to the features actually provided, to:

• Store, display, edit and manage subscription records;
• Calculate and display bills, billing cycles and spending summaries;
• Provide Gmail and email discovery that you choose to enable, and let you review, import or reject the results;
• Respond to support requests and data-access or deletion requests;
• Operate the Services, troubleshoot problems and prevent unauthorized use;
• Understand app usage and improve the Services through Firebase Analytics;
• Meet applicable legal obligations.

Gmail data is additionally subject to Section 7 and our Google User Data Policy. We do not use Gmail data for advertising or to train or improve AI models.

4. Gmail reading and subscription discovery

Gmail discovery is an optional feature. It is enabled only after you explicitly connect your Gmail account through Google’s OAuth authorization process and grant read-only access. Connecting Gmail is not required to use manual subscription management.

We request the Gmail read-only scope and use it to search for and analyze subscription-related receipts, bills, invoices, and renewal notices. The information processed may include the authorized Gmail address, message senders, recipients, subject lines, dates, message identifiers, and the portions of message content needed to identify subscription details. From that content we extract providers, amounts, currencies, billing cycles, renewal dates, and relevant subscription statuses.

The initial scan may cover up to the most recent 12 months of relevant messages when you first connect the mailbox or request a rescan. While the Gmail connection remains active, we may perform periodic or on-demand synchronization to update subscription records. We do not read attachments for subscription discovery, and we do not use Gmail read access to send, delete, archive, mark as read, or otherwise modify your messages.

Google’s read permission may cover a broad range of mailbox content. SubPuffin applies application-level rules to identify subscription-related messages; this is not a Google-provided “billing emails only” permission. Automated identification may produce incorrect matches, and you can review, correct, or reject the results before importing them.

We obtain access through Google’s authorization process and never ask you to provide your Google Account password to SubPuffin. You can disconnect Gmail at any time through the app’s Connected accounts controls or revoke access in your Google Account settings. After disconnection we stop subsequent synchronization and delete or invalidate the associated OAuth tokens, subject to the retention described in Section 9.

5. Gmail sending and cancellation assistance

We do not currently request Gmail send permission for the subscription-discovery feature. If email-based cancellation assistance is introduced and you choose to use it, we will request the necessary Gmail sending permission separately and will send a cancellation request only after displaying the sending account, recipient, and message content for your confirmation. Connecting Gmail for read-only discovery does not authorize sending.

This sending permission would not be used for marketing emails or to delete, archive, mark as read or modify your existing messages.

Sending a cancellation request would disclose the information included in the message to the designated provider, such as your email address, service name and necessary subscription identifiers. Please review the content before sending.

No cancellation action records are retained because cancellation assistance is not currently enabled. When enabled, records will include the recipient, approved request content, timestamp, status and message identifier, and will be retained for up to 24 months to display progress and resolve issues, as described in Section 9.

6. Bank connectivity and Plaid

To help you identify recurring subscriptions, understand your bills and manage recurring spending, SubPuffin may offer bank connectivity through Plaid, a third-party financial data service provider, where available. Bank connectivity is enabled only after you connect your bank account through Plaid Link and separately authorize it. It is optional and not required to use manual subscription management.

When you choose to connect a bank account, you will be directed to Plaid Link to sign in to your financial institution and authorize SubPuffin to access your account data through Plaid. With your authorization, Plaid provides us with account and transaction data, including merchants, amounts, transaction dates and recurring billing patterns, which we use to identify subscriptions, detect renewals and calculate spending summaries. We do not receive your bank login credentials through Plaid, and you should never provide your financial-institution username or password to SubPuffin.

By connecting a bank account through Plaid Link, you consent to Plaid processing your account data in accordance with Plaid’s privacy policy, available at https://plaid.com/legal, and to SubPuffin processing the account and transaction data made available to us for the purposes described in this Policy. Our use of data obtained through Plaid is subject to our agreements with Plaid.

You can disconnect your bank account at any time through the app’s Connected accounts controls. After disconnection, we stop obtaining data through Plaid and delete or invalidate the associated access token and the bank account and transaction data we hold, subject to the retention described in Section 9. You may also manage or delete your data directly through Plaid Portal at https://my.plaid.com/. Disconnecting a bank account does not affect manually entered subscription records.

Bank connectivity is not yet enabled in the current release. Mentioning this feature in this Policy does not by itself authorize access to banking data; we will obtain your authorization through Plaid Link before any bank account is connected.

7. Restrictions on Google data

SubPuffin’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements, and the applicable Google Workspace user data policy.

We do not sell Gmail data or information derived from it. We do not use Gmail data for advertising, profiling for advertising, credit assessment, lending, or any other purpose unrelated to providing subscription discovery and management. We do not use Gmail data to train or improve general-purpose, cross-user, or other non-personalized AI models.

Human access to Gmail data is limited to circumstances permitted by Google’s policies, such as your explicit permission to inspect specific information for support, or necessary security investigations and legal compliance. We do not currently use an external AI service to extract email content. If one is introduced, we will disclose the provider, transferred data, processing locations, retention, and human-access arrangements, and obtain any required consent before use.

SubPuffin does not use Google APIs or Google user data to create, generate, or distribute AI-generated non-consensual intimate imagery (NCII) or any other prohibited content. We do not use Google APIs for the generation of sexual content involving real people without consent.

8. Information sharing

Our service providers and processing arrangements are:

Tencent Cloud provides hosting, storage, and delivery for account and subscription data. Google LLC provides Google Sign-In and, when you connect Gmail, Gmail API services. Google Firebase provides analytics services. Google Fonts may be used to deliver website fonts. Plaid Inc. provides bank connectivity when you connect a bank account and may receive the account and transaction data you authorize, as described in Section 6. Each provider processes only the data relevant to its function.

We provide information to service providers only as needed for the disclosed services and require compliance with applicable data-protection obligations. A provider receiving a cancellation request receives only the content you confirm for sending.

We may also disclose necessary information as required by law or transfer information in an appropriate corporate transaction, subject to applicable law and platform policies. Transfers of Google data remain subject to Limited Use requirements, including prior explicit consent where applicable.

We do not sell personal information or share it for cross-context behavioral advertising.

9. Data retention and deletion

We retain data according to the following schedule, rather than indefinitely for possible future features:

If some information is retained for legal obligations or necessary security purposes, we will explain its categories, reasons and applicable retention periods and restrict its use. Cancellation emails received by third-party providers are not automatically removed from their systems when you delete SubPuffin data.

10. Your choices and rights

You may edit or delete manual subscription records and request account deletion through Profile > About > Delete my account. You may disconnect Gmail through the app’s Connected accounts controls (for example, Settings > Connected accounts) or revoke access through your Google Account settings.

After disconnection or revocation, we stop subsequent Gmail synchronization and actions not yet executed. This does not recall messages already sent. Imported records are retained as normal subscription records until you delete them in My Subscriptions or delete your SubPuffin account.

You may request access, correction, export or deletion of personal data and your account through Profile > About > Delete my account, this website, or security@novaxfy.com. We may request reasonable identity verification and handle requests under applicable law.

Depending on your location and applicable law, you may have rights to access, correct, delete, export, restrict or object to processing, withdraw consent, appeal decisions or complain to a regulator. We aim to respond within 30 days after sufficient identity verification. Some requests may be extended where permitted by law.

11. Security and international processing

We apply safeguards appropriate to the information processed, including TLS 1.2 or higher for data in transit, encryption at rest for sensitive data, secure credential management for OAuth tokens and app-specific passwords, role-based access controls based on least privilege, and logging and monitoring to detect unauthorized access. No system can guarantee absolute security.

Tencent Cloud is used for primary hosting and storage. Google processes sign-in data and, when you connect Gmail, Gmail API data as described by Google. Firebase processes analytics data. Plaid processes authorized bank account data under its own security and privacy arrangements. The selected Tencent Cloud region is configured in the service deployment.

We rely on performance of a contract to provide accounts and subscription management, legitimate interests for security and service improvement, consent for optional integrations, and legal obligation where applicable. For transfers from the EEA or UK to countries without an adequacy decision, we use Standard Contractual Clauses or another lawful transfer mechanism. Google permission authorization does not replace other applicable data-protection requirements.

12. Cookies, children and policy updates

Our website does not set advertising or cross-site tracking cookies. We use Firebase Analytics to understand app usage and improve the Services; analytics events do not include Gmail message content. Loading website fonts may cause your browser to connect to Google Fonts.

The minimum age for using the Services is 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will delete it. Please contact security@novaxfy.com if you believe a child under 16 has provided personal information.

We maintain this Policy by updating this page and its effective date. We will provide appropriate advance notice of material changes and obtain renewed consent or authorization where required for new data uses or permissions.

Please contact us using the details at the beginning of this Policy with questions about it or our handling of personal information.