Privacy Policy
Last updated: 11 October 2026
- Your subscriptions stay on your iPhone. We have no server and no account system.
- Invoice scanning runs entirely on your device. Photos and their text are never uploaded.
- iCloud sync is off unless you turn it on. When on, your data goes to your own iCloud account, which we cannot read.
- The app sends anonymous usage counts and crash reports through Google Firebase, so we can fix problems. They never include your subscriptions, amounts or invoices. You can turn this off in Settings.
- The app does not use advertising identifiers and does not track you.
Who we are
SmartSubscription (“the app”) is made by Timeskip (Phong Tran; “we”, “us”). If you have a question about this policy, write to founder@timeskip.dev.
What the app stores on your device
The app stores what you enter: subscription names, providers, amounts, currencies, billing cycles, dates, categories, notes and the payments you record, along with your app settings. If you scan an invoice, the image is saved in the app's own storage on your device so you can look at it later. None of this is sent to us.
Invoice scanning
When you scan or choose a photo of an invoice, the app reads the text with Apple's on-device text recognition (Vision) and turns it into a subscription with Apple's on-device language model (Apple Intelligence). This happens entirely on your iPhone. The image and the text read from it are not sent to us or to any other service. The camera and photo library are used only when you choose to scan, and only after you give permission.
iCloud sync (optional)
iCloud sync is off by default. If you turn it on in Settings, the app uses Apple's CloudKit to keep your subscription records in the private database of your own iCloud account, so they match across your devices. Apple handles that storage under its own privacy policy. We do not run a server and cannot see, read or access your iCloud data. Scanned invoice images are not part of the sync; they stay on the device where you scanned them.
Analytics and crash reports
To find bugs and see which features are used, the app uses two Google services: Firebase Analytics and Firebase Crashlytics. Both are on by default. They stop as soon as you turn off Settings › About › Share analytics & crash reports, and nothing more is sent while it is off.
What is sent:
- Usage events. That the app was opened, how long a session lasted, which screens were shown, and a few named actions: a subscription was added (by scan or by hand), a scan finished (or the kind of failure, such as “no text found”), and the unlock was bought. Firebase also records that an in-app purchase happened.
- Crash reports. Where in the app's code a crash happened, with the device model, iOS version, app version, and the memory and storage free at that moment.
- An installation ID. A random ID that Firebase creates for this copy of the app, so a crash can be counted once. It changes if you delete and reinstall the app. It is not your advertising identifier.
- Approximate region. Firebase works out your country or region from your IP address. Precise location is never collected.
What is never sent: subscription names, providers, amounts, currencies, dates, categories, notes, invoice images or the text read from them.
We use this data only to fix problems and improve the app. It is not linked to your name or Apple Account, not used for advertising, not sold, and not combined with data from other apps or websites. Google processes it on our behalf under the Firebase terms (see Privacy and Security in Firebase). Crashlytics keeps crash reports for 90 days.
Exchange rates
The app ships with a set of currency exchange rates. When you tap “Update exchange rates” in Settings, or if no rates are available on the device, the app downloads the latest rates from ExchangeRate-API (api.exchangerate-api.com). The request asks only for the public rate table; it contains none of your subscriptions or amounts. Like any web request, it reveals your device's IP address to that service.
Notifications
Renewal reminders are local notifications that the app schedules on your iPhone. They are not sent from a server, and we do not use push notifications. You can turn reminders off in the app or in iOS Settings.
Exporting your data
“Export data (CSV)” creates a spreadsheet file of your subscriptions on your iPhone and opens the iOS share sheet. The file goes only where you choose to send it.
Purchases
The one-time unlock is sold through Apple's App Store. Apple processes the payment; we never receive or store your payment details. Apple tells the app only whether the purchase was made, so it can unlock the feature. Apple's own privacy policy covers the transaction.
Deleting your data
You can delete any subscription in the app. Deleting the app removes everything it stored on that device. If you used iCloud sync, the synced copy stays in your iCloud account until you remove it; you can manage or delete it from the iCloud settings on your device. We hold no copy of your subscriptions, so there is nothing of them to delete on our side. Analytics and crash data are not linked to you, so we cannot pick out one person's data; turning off the switch in Settings stops any more from being sent.
Children
The app is not directed at children under 13, and we do not knowingly collect information from them. The only data the app sends is the anonymous usage and crash information described above, which can be turned off in Settings.
Changes to this policy
If the way the app handles data changes, we will update this page and the “Last updated” date above before that version is released.
Contact
Timeskip · founder@timeskip.dev