[{"data":1,"prerenderedAt":397},["ShallowReactive",2],{"page-\u002Fprivacy":3},{"id":4,"title":5,"body":6,"description":388,"extension":389,"meta":390,"navigation":391,"path":392,"seo":393,"stem":394,"updated":395,"__hash__":396},"content\u002Fprivacy.md","Privacy Policy",{"type":7,"value":8,"toc":359},"minimark",[9,19,24,40,44,49,52,66,70,73,77,80,84,87,91,94,98,101,105,108,129,132,136,139,154,163,167,170,174,200,204,213,217,231,235,255,258,262,265,269,286,290,293,304,307,310,314,326,330,333,337,340,344,347,351],[10,11,12,13,18],"p",{},"This policy explains what Alan: Subscription Tracker (“the app”) does with your data. The app is made by Josh Mustafa, an individual developer in the United Kingdom. I decide how your data is used. If you have a question, email ",[14,15,17],"a",{"href":16},"mailto:me@joshmustafa.com","me@joshmustafa.com",".",[20,21,23],"h2",{"id":22},"the-short-version","The short version",[25,26,27,31,34,37],"ul",{},[28,29,30],"li",{},"Your list of subscriptions is saved on your iPhone. If you share it with your household, it is saved in iCloud, not on my server.",[28,32,33],{},"When you scan a statement, the file goes to my server and to OpenAI so AI can read it. The file and its transactions are not kept, and they are not used to train AI. The one exception is Help Alan get better, which is off unless you turn it on: then I may keep a redacted copy.",[28,35,36],{},"My server keeps a small account: your Apple sign in ID, the email address Apple gives me, your plan and a record of each scan.",[28,38,39],{},"There are no ads and no tracking. The app sends anonymous usage events and crash reports to my own tool, Loop, tied to a random ID rather than to you. I don’t sell your data.",[20,41,43],{"id":42},"what-my-server-keeps","What my server keeps",[45,46,48],"h3",{"id":47},"your-account","Your account",[10,50,51],{},"You sign in with Apple. My server keeps:",[25,53,54,57,60,63],{},[28,55,56],{},"The ID Apple gives the app for you, and an account ID for you on my server.",[28,58,59],{},"The email address Apple shares. If you choose Hide My Email, this is a private relay address from Apple. The app doesn’t ask for your name.",[28,61,62],{},"A token from Apple, stored encrypted. It is only used to remove Sign in with Apple when you delete your account.",[28,64,65],{},"Sign in tokens for your devices. These are stored only as a one way hash.",[45,67,69],{"id":68},"your-scan-settings","Your scan settings",[10,71,72],{},"The day your monthly scan cycle starts and your time zone. These make your cycle start on your own day.",[45,74,76],{"id":75},"your-plan-and-purchases","Your plan and purchases",[10,78,79],{},"Apple takes your payment. I never see your card details. When you buy, restore or renew, the app sends my server Apple’s signed record of the purchase. My server keeps the plan you have (Pro, Family or Lifetime), when it ends, and whether it is in a free trial. For scan packs it keeps Apple’s transaction ID, the product and how many scans you have left.",[45,81,83],{"id":82},"a-record-of-each-scan","A record of each scan",[10,85,86],{},"For each scan, my server keeps the kind of scan, how many files it had, when it started and finished, and what the AI reading cost. It keeps nothing from the statement itself.",[45,88,90],{"id":89},"subscriptions-you-confirm-for-the-shared-list","Subscriptions you confirm, for the shared list",[10,92,93],{},"When you confirm a subscription from a statement, or add one by hand, the app sends a short merchant name (for example “NETFLIX”), the service it matched or the name you gave it, whether it is a subscription or a bill, and your country. My server stores this with your account ID, so each person only counts once. When three people confirm the same merchant, the app learns to recognise it for everyone. No amounts, dates or other statement lines are sent.",[45,95,97],{"id":96},"logo-lookups","Logo lookups",[10,99,100],{},"When you add a subscription that isn’t in the app’s list, the app sends its name and your country so my server can find an icon. This is stored without any link to you. To find the icon, my server may search the App Store and the service’s website, and ask OpenAI to check the image is the right logo.",[20,102,104],{"id":103},"usage-crash-reports-and-feedback-loop","Usage, crash reports and feedback (Loop)",[10,106,107],{},"The app uses Loop, a tool I built and run myself, to see which parts of the app are used and to fix problems. It sends:",[25,109,110,117,123],{},[28,111,112,116],{},[113,114,115],"strong",{},"Usage events",", such as which onboarding steps you reached, when a scan starts, finishes, is cancelled or fails, when a subscription is added or cancelled, paywall views and purchases. They carry the service from the app’s public list (for example “netflix”) but never your custom names, merchant names, amounts, file names or anything from a statement.",[28,118,119,122],{},[113,120,121],{},"Crash and error reports",": your device model, iOS version, app version, language, whether you are on Wi‑Fi or mobile data, and technical details of the error. They never include statement content or your personal details.",[28,124,125,128],{},[113,126,127],{},"Bug reports and feature requests"," you choose to send from Settings, with the text you write and the same device details.",[10,130,131],{},"All of this is tied to a random ID the app creates on your iPhone, not to your account, your Apple ID or your email. Deleting the app resets it. My Loop server is hosted by Fly.io and sees your IP address when the app connects, as any server does. I keep this data for up to 24 months and use it only to improve the app.",[20,133,135],{"id":134},"statements-you-scan","Statements you scan",[10,137,138],{},"You choose a PDF, a CSV file or a screenshot. Here is what happens to it.",[140,141,142,145,148,151],"ol",{},[28,143,144],{},"The app sends the file to my server over an encrypted connection.",[28,146,147],{},"My server sends its contents to OpenAI. OpenAI reads the transactions and sends them back.",[28,149,150],{},"My server sends the transactions to your iPhone. The app finds your subscriptions on your iPhone.",[28,152,153],{},"My server keeps nothing from the file, unless you turned on Help Alan get better (see below). Not the file, not its name and not the transactions. Any temporary copy is deleted as soon as reading ends. Statement data is kept out of my server logs and error reports.",[10,155,156,157,18],{},"I ask OpenAI not to store these requests. OpenAI does not use data sent through its API to train its models. OpenAI may keep API data for up to 30 days to check for abuse, and then deletes it. You can read ",[14,158,162],{"href":159,"rel":160},"https:\u002F\u002Fopenai.com\u002Fpolicies\u002Fprivacy-policy\u002F",[161],"nofollow","OpenAI’s privacy policy",[20,164,166],{"id":165},"if-you-turn-on-help-alan-get-better","If you turn on Help Alan get better",[10,168,169],{},"Help Alan get better is off unless you turn it on. The app asks once when you set it up, and you can change it any time in Settings. While it is on, I may keep a redacted copy of each statement you scan, with the choices you make when you review it. Names, addresses, account numbers, sort codes and card numbers are blacked out before anything is kept, and I check every copy before I use it. I use these copies only to make the app read statements more accurately, which can mean sending a redacted copy to OpenAI to read again. They are never used to train AI, for ads or to make decisions about you, and only I can see them. Each copy is deleted 24 months after the scan, or sooner if you delete your account or ask me. Turning the setting off stops new copies at once. My server also keeps whether the setting is on, the version of the wording you agreed to, and when you turned it on or off.",[20,171,173],{"id":172},"what-stays-on-your-iphone","What stays on your iPhone",[25,175,176,182,188,194],{},[28,177,178,181],{},[113,179,180],{},"Your subscriptions."," Names, prices, dates, reminders, payment history and settings are saved on your iPhone. Exports and backups go where you choose.",[28,183,184,187],{},[113,185,186],{},"Scan memory."," The app remembers what past scans found and what you chose, so the next scan knows. This stays on your iPhone only. It is kept for 13 months, left out of device backups and never sent to me.",[28,189,190,193],{},[113,191,192],{},"Reminders."," Renewal and trial reminders are scheduled on your iPhone. I don’t send you push messages.",[28,195,196,199],{},[113,197,198],{},"Widgets."," Widgets read a small summary the app saves on your iPhone.",[20,201,203],{"id":202},"household-sharing","Household sharing",[10,205,206,207,212],{},"If you share your list with your household, the app uses Apple’s iCloud. Shared subscriptions and member names are saved in the iCloud account of the person who set up the household, and shared with the people they invite. I can’t see this data. ",[14,208,211],{"href":209,"rel":210},"https:\u002F\u002Fwww.apple.com\u002Flegal\u002Fprivacy\u002F",[161],"Apple’s privacy policy"," covers it.",[20,214,216],{"id":215},"what-i-dont-do","What I don’t do",[25,218,219,222,225,228],{},[28,220,221],{},"No ads and no tracking across other apps or websites.",[28,223,224],{},"No third party analytics or ad tools. Usage and crash reports go only to my own tool, Loop.",[28,226,227],{},"I don’t sell your data or share it for marketing.",[28,229,230],{},"Your statements are never used to train AI.",[20,232,234],{"id":233},"who-else-handles-your-data","Who else handles your data",[25,236,237,243,249],{},[28,238,239,242],{},[113,240,241],{},"Apple"," for Sign in with Apple, payments and iCloud.",[28,244,245,248],{},[113,246,247],{},"OpenAI"," to read statements and check logos.",[28,250,251,254],{},[113,252,253],{},"Fly.io"," hosts my server, my Loop server and their databases.",[10,256,257],{},"These companies may handle data outside the UK and Japan, including in the United States. They only use it to provide their service to me.",[20,259,261],{"id":260},"why-i-use-your-data","Why I use your data",[10,263,264],{},"I use your data to run the app for you, as you asked when you signed up. I use the shared list and the limits on scans because they keep the app useful and fair, which is my legitimate interest. If you turn on Help Alan get better, I keep and use redacted copies because you agreed to it, and you can withdraw by turning it off. I don’t use your data for anything else.",[20,266,268],{"id":267},"how-long-i-keep-it","How long I keep it",[25,270,271,274,277,280,283],{},[28,272,273],{},"Statement files and transactions: not kept. While Help Alan get better is on, redacted copies: up to 24 months from each scan.",[28,275,276],{},"Your account, plan, scan records, confirmations and the history of your Help Alan get better setting: until you delete your account.",[28,278,279],{},"Sign in tokens: until you sign out or delete your account.",[28,281,282],{},"Scan memory on your iPhone: 13 months, or until you delete your account or the app.",[28,284,285],{},"Usage events, crash reports and bug reports in Loop: up to 24 months.",[20,287,289],{"id":288},"deleting-your-account","Deleting your account",[10,291,292],{},"In the app, go to Settings, then Account, then Delete account. This:",[25,294,295,298,301],{},[28,296,297],{},"Deletes your account from my server, with your email address, sign in tokens, scan records, purchase records, confirmations, any redacted copies you shared and the history of your Help Alan get better setting.",[28,299,300],{},"Removes Sign in with Apple for the app.",[28,302,303],{},"Clears the subscriptions and the scan memory on your iPhone, and the app starts again from the beginning.",[10,305,306],{},"The random Loop ID isn’t linked to your account; delete the app to reset it. To remove household data from iCloud, leave the household or stop sharing. Deleting your account doesn’t cancel an App Store subscription. Cancel that in your iPhone’s Settings. You can also email me to delete your account.",[10,308,309],{},"Once enough people confirm a merchant, the shared list may keep the fact that this merchant name belongs to a service. That fact holds nothing about you.",[20,311,313],{"id":312},"your-rights","Your rights",[10,315,316,317,319,320,325],{},"You can ask to see, correct or delete your data, or object to how I use it. Email ",[14,318,17],{"href":16},". I will reply within one month. In the UK, you can also complain to the ",[14,321,324],{"href":322,"rel":323},"https:\u002F\u002Fico.org.uk\u002F",[161],"Information Commissioner’s Office",". In Japan, you can ask me to disclose, correct or stop using your personal information under the Act on the Protection of Personal Information.",[20,327,329],{"id":328},"keeping-your-data-safe","Keeping your data safe",[10,331,332],{},"The app talks to my server over encrypted connections. Your sign in token is kept in your iPhone’s Keychain. On my server, Apple’s token is encrypted and sign in tokens are hashed.",[20,334,336],{"id":335},"children","Children",[10,338,339],{},"The app is not made for children under 13, and I don’t knowingly collect their data. If you think a child has given me data, email me and I will delete it.",[20,341,343],{"id":342},"changes","Changes",[10,345,346],{},"If I change this policy, I will update this page and the date at the top.",[20,348,350],{"id":349},"contact","Contact",[10,352,353,354,357],{},"Josh Mustafa, United Kingdom",[355,356],"br",{},[14,358,17],{"href":16},{"title":360,"searchDepth":361,"depth":361,"links":362},"",2,[363,364,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387],{"id":22,"depth":361,"text":23},{"id":42,"depth":361,"text":43,"children":365},[366,368,369,370,371,372],{"id":47,"depth":367,"text":48},3,{"id":68,"depth":367,"text":69},{"id":75,"depth":367,"text":76},{"id":82,"depth":367,"text":83},{"id":89,"depth":367,"text":90},{"id":96,"depth":367,"text":97},{"id":103,"depth":361,"text":104},{"id":134,"depth":361,"text":135},{"id":165,"depth":361,"text":166},{"id":172,"depth":361,"text":173},{"id":202,"depth":361,"text":203},{"id":215,"depth":361,"text":216},{"id":233,"depth":361,"text":234},{"id":260,"depth":361,"text":261},{"id":267,"depth":361,"text":268},{"id":288,"depth":361,"text":289},{"id":312,"depth":361,"text":313},{"id":328,"depth":361,"text":329},{"id":335,"depth":361,"text":336},{"id":342,"depth":361,"text":343},{"id":349,"depth":361,"text":350},"What Alan: Subscription Tracker does with your data: what my server keeps, what happens to statements you scan, Help Alan get better, what stays on your iPhone and your rights.","md",{},true,"\u002Fprivacy",{"title":5,"description":388},"privacy","29 October 2026","tRrH_gyTq1Y_jw8nE844ebl8lHLbZO22DXhWU4v9gzs",1793296471090]