1. Scope
This Privacy Policy applies to the SubWise iOS application and the SubWise API and website. “SubWise,” “we,” and “us” refer to the developer and operator of the SubWise service.
SubWise helps people identify recurring charges, organize subscriptions, predict upcoming payments, and evaluate possible savings. It does not automatically cancel or change a subscription, and it does not provide banking, investment, tax, or legal advice.
2. Information we process
Account and authentication data
When you use Sign in with Apple, we receive an Apple-specific account identifier and, only when Apple makes them available and you choose to share them, your name and email address. We store protected session records so you can remain signed in. We do not receive your Apple Account password.
Subscription and savings data
We process the information you enter or confirm, such as service and plan names, price, billing cycle, renewal or trial date, category, payment-method label, usage or importance choices, savings goals, recommendations, and actions you mark complete.
Bank and card connections through Plaid
If you choose Connect account, Plaid connects to your financial institution. SubWise receives a provider token—not your bank password—and encrypts that token on the server. We process transaction descriptions, dates, amounts, recurrence information, institution names, and limited account labels to identify possible subscriptions. A detected item is not saved as your subscription until you confirm it. SubWise is designed as a subscription detector, not a complete transaction ledger.
Apple Wallet and screenshot discovery
When available and authorized, FinanceKit lets the app read transactions from eligible accounts and date ranges you approve, or only transactions you choose manually. Wallet transactions are analyzed on your device, and only subscription details you confirm are saved locally. FinanceKit availability depends on country and account eligibility. Screenshot text recognition also runs on your device using Apple Vision; the selected screenshot is not uploaded to the SubWise API for OCR.
Savings Agent conversations
If you enable and use the Savings Agent, SubWise sends your question and a structured summary of relevant subscriptions to the authenticated API and then to OpenAI to generate a response. Conversation messages and responses are stored so chat history works. We exclude bank credentials, access tokens, account numbers, and raw transaction histories from AI requests.
Household, notification, and device data
Household features may store a household name, member display name, invitation email, signed invitation status, and the sharing level selected by the household. When server email delivery is enabled, the recipient address and invitation content are sent to our transactional email provider. Renewal notifications are scheduled locally. An APNs device token may be stored securely in the device Keychain for notification registration; the current service does not upload that token to the SubWise API.
Technical data
Our hosting systems may process IP address, request time, request identifier, endpoint, response status, device or network metadata, and error details for security, abuse prevention, reliability, and troubleshooting. The iOS analytics abstraction filters merchant, amount, email, account, and token fields from local diagnostic events.
3. How we use information
- Authenticate accounts and keep data separated by user.
- Detect recurring charges and normalize merchant names.
- Calculate monthly and annual spending using confirmed prices.
- Predict renewal timing and provide reminders.
- Identify possible duplicates, price changes, and savings opportunities.
- Provide household sharing according to the selected visibility level.
- Operate the Savings Agent and retain conversation history.
- Secure, monitor, debug, and improve the service.
- Comply with applicable law and valid legal requests.
We do not use financial data for behavioral advertising, and we do not sell personal information.
5. Your choices and controls
- Use offline mode without creating a SubWise server account.
- Decline or revoke Apple Wallet, photo-library, or notification permissions in iOS Settings.
- Choose which detected subscription candidates to add, edit, or ignore.
- Disconnect a financial institution through SubWise support and manage Plaid connections through Plaid Portal where available.
- Turn Savings Agent processing off in SubWise settings.
- Control household visibility and remove household members.
- Export the subscription records stored on your device as CSV.
- Request access, correction, deletion, restriction, or portability where applicable.
Some functionality will not work after you revoke required access, but bank connection and AI processing are always optional.
6. Retention and deletion
Local app data remains until you delete it, reset the app, or remove the app from your device. Server account data is retained while your account is active and deleted when the authenticated account-deletion process is completed, subject to limited legal, fraud-prevention, security, backup, and dispute-resolution needs. Deletion cascades through server subscriptions, sessions, institution connections, household records you own, savings plans, and AI conversations. Security audit records may remain after their direct account link is removed.
Plaid, Apple, OpenAI, Vercel, and Neon apply their own retention rules when acting as independent providers or subprocessors. You may also need to make a separate request to a provider, such as Plaid, for data controlled by that provider.
7. Security
SubWise uses encrypted transport, authenticated user boundaries, hashed refresh tokens, Keychain storage for device credentials, encrypted Plaid access tokens, secret storage outside the iOS binary, request validation, rate limits, and logging redaction. No storage or transmission method can be guaranteed completely secure. Please report suspected unauthorized access through the contact channel below.
8. Children
SubWise is intended for people who can lawfully manage financial accounts and subscriptions. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided data, contact us so we can investigate and delete it where appropriate.
9. International users
SubWise’s providers may process data in the United States and other countries. Privacy protections and government access rules can differ from those in your location. Depending on where you live, you may have rights to access, correct, delete, obtain, restrict, or object to processing of personal information, withdraw consent, or complain to a data protection authority.
10. Changes to this policy
We may update this policy as SubWise features, providers, or legal requirements change. We will post the revised policy here and update the date at the top. Material changes may also be presented in the app where appropriate.
11. Contact
For privacy questions, data-rights requests, or account deletion assistance, use the developer support contact on the SubWise App Store product page. To protect your data, we may need to verify that a request comes from the account holder.
App: SubWise
Bundle identifier: com.toto.Subwise
Policy URL: https://subwise-api.vercel.app/privacy-policy