Privacy Policy
Subcentre keeps track of your household's subscriptions. This page says what we store, why, where, for how long, and how to get it back or delete it. It is written to be read.
What we store
- Account details: your email address, the name you enter, the household you belong to, and how you signed up. You can sign in with an emailed link, with Google or Apple, or with a password you choose. A password is stored only as a salted hash (scrypt), never in clear.
- Household members: names, optional emails and roles you add for the people in your household, and the labels you type for payment methods (for example "Visa •••• 4421"). We never ask for or store full card numbers, and we never connect to your bank.
- Subscriptions: what you pay for, prices, billing cycles, dates, notes and price history, entered by you or extracted from receipts.
- Receipts and screenshots: emails forwarded to your household's Subcentre address, and text or images you paste in. The original email or image is kept for 30 days so you can check what was read, then deleted. The extracted facts (provider, price, dates) stay with the subscription. A clear receipt, trial or price notice is added to your ledger automatically and can be undone from the Inbox; anything unclear waits for your review. You can turn automatic filing off in the Inbox tab.
- Technical data: a session cookie so you stay signed in, server logs with timestamps and IP addresses kept for a short period for security, and, if you turn on notifications, the push subscription of that device.
- Ad click id: if you arrive from a Google ad, the click id in the link is kept with your household so that your sign-up can be reported to Google Ads once. It is not used for anything else.
Advertising measurement
We advertise Subcentre on Google Ads, and the pages load Google's tag to measure whether those ads lead to sign-ups. The tag runs with advertising and analytics consent settings granted by default. Google may use advertising cookies and identifiers to measure conversions and personalize advertising. When your account is created, we report to Google that a sign-up happened, together with the ad click id if you arrived from an ad and a hashed form of your email address so Google can match the sign-up to the click (the hash is computed in your browser before anything is sent). Reporting may be retried using the same conversion identifier to prevent duplicate counts. We do not include subscription, receipt or household details in these conversion events. We do not sell your data.
Why we use it
Email reminders and weekly digests are off by default for every account. Each household member chooses their own preferences in the Account / Family tab. We record those choices and when they were last updated. Every reminder and digest includes a link to unsubscribe without signing in. Account confirmation, requested sign-in links and household invitations are separate.
To run the service you signed up for: showing your ledger, sending reminders and the weekly digest only when you enable them, reading forwarded receipts, and letting the people in your household see the same ledger. The legal basis is the contract with you and, for security measures, our legitimate interest in keeping the service safe.
Who else touches the data
Subcentre runs on infrastructure providers who process data on our behalf under their data processing terms:
| Provider | What for | Where |
|---|---|---|
| Railway | Hosting, database, and storage of receipts for up to 30 days | Netherlands |
| Anthropic | Reading forwarded receipts and screenshots to extract subscription facts. Content sent for extraction is not used to train models. | United States |
| Postmark | Receiving mail sent to your household's Subcentre address | United States |
| Resend | Sending sign-in links, reminders and the weekly digest | European Union |
| Sign in with Google, if you choose it; Google Ads measurement as described above | United States | |
| Apple | Sign in with Apple, if you choose it | United States |
| Cloudflare | Domain name and traffic routing | Global network |
Where data leaves the European Economic Area, it is covered by the provider's standard contractual clauses or an equivalent recognised safeguard.
Sharing inside a household
A household is a shared ledger. Everyone you invite sees every subscription in it, including who pays and what receipts arrived. Only invite people you are happy to share that with. The member who created the household, and anyone they make an administrator, can change settings, invite people and delete the household; anyone can leave it.
How long we keep it
- Original receipts and screenshots: 30 days.
- Your account and ledger: until you delete it. A ledger that was tried without signing in and not opened for 30 days is deleted automatically.
- Sign-in links expire after 15 minutes; invite links after 7 days.
Your rights
From the Account or Family tab you can download everything we hold about your household as a file, leave a household, or delete it entirely; access is revoked immediately; stored receipts are queued for deletion and retried by the daily worker. For anything else, including correcting data or a question about this policy, email contact@subcentre.com. If you are in the EU you may also complain to your data protection authority.
Cookies
One cookie, sc_session, keeps you signed in. During a Google or Apple sign-in a second cookie, sc_oauth, holds the state of that sign-in for ten minutes. Both are set only by us and are not used for tracking. Google's tag may set advertising cookies to connect an ad click with a sign-up. Local browser storage remembers the tab you were on and your chosen reporting currency; session storage keeps the ad click id until sign-up.
Children
Accounts are for adults. A household may list younger members by name so their subscriptions can be tracked, and that information is provided by the adult who runs the household.
Changes
If this policy changes in a way that matters, we will say so on this page and, for significant changes, by email.