Legal

Privacy Policy

Last updated: 11 August 2026

In short: Suberry is built to keep your financial life private. Your subscriptions are stored on your device, your email is read on your phone, and bank access is strictly read-only. We never move your money, never store your bank password, and never sell your data. Connecting a bank or email is optional — the app works fully with manual entry.

This Privacy Policy explains how RLAM FZCO ("Suberry", "we", "us") collects, uses, and protects your information when you use the Suberry iOS application (the "App"). By using the App, you agree to this policy.

1. Information we collect

Information you provide

Subscription details you add (service name, price, billing cycle, renewal date, category, notes). This is stored primarily on your device.

Information from connections you choose to enable

Bank data (via Plaid), only if you connect a bank: we use Plaid to access your recent transactions on a read-only basis to detect recurring charges. We do not receive or store your online-banking credentials, and we cannot move money. We store only an encrypted access token that lets us fetch recurring-charge summaries; we do not persist your raw transaction history on our servers.
Email data (via Microsoft Outlook or Gmail), only if you connect an inbox: we request read-only access to find subscription receipts. Email content is parsed on your device; we store only an encrypted access token, and you can disconnect at any time.

Information collected automatically

Purchase & subscription status via Apple and our provider RevenueCat, to manage your Suberry Premium entitlement.
Usage and diagnostics via Google Firebase Analytics, to understand how the App is used and to improve it.
Marketing attribution via Apple's AdServices framework (Apple Search Ads), to measure which campaigns bring new users. This does not require IDFA/ad tracking.
A random install identifier (a UUID generated on your device) used to key any server-side records. We do not require an account, name, or password.

2. How we use your information

To detect, organize, and display your subscriptions, totals, and upcoming renewals.
To send you renewal and trial reminders (via on-device notifications).
To guide you to cancellation and refund steps for services you want to leave.
To operate and manage your Premium subscription.
To maintain, secure, and improve the App.

3. On-device processing & data minimization

Suberry is local-first. Wherever possible, your data is processed on your device — email receipts are parsed on your phone, and your subscription list is stored locally. We minimize what leaves your device and never collect more than we need to provide the service.

4. How we share information

We do not sell your personal data. We share limited data only with service providers that help us run the App:

Plaid — read-only bank transaction access (only if you connect a bank).
RevenueCat — subscription/entitlement management (no bank or email data).
Google (Firebase) — analytics and diagnostics.
Apple — app distribution, in-app purchases, and Search Ads attribution.
Microsoft / Google — email authentication (only if you connect an inbox).

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

5. Data retention & deletion

You can export or delete your data from within the App at any time.
You can disconnect any linked bank or email account at any time; disconnecting a bank revokes the access token at Plaid.
When your Premium access ends, we automatically remove your linked bank connections, revoking the associated tokens.
We retain server-side records (such as encrypted tokens) only for as long as the connection is active or as needed to provide the service and meet legal obligations.

6. Security

We protect your data with industry-standard measures: all traffic is encrypted in transit using TLS, third-party access tokens are encrypted at rest using AES-256-GCM, access is granted on a least-privilege basis, and administrative access to our systems is restricted and protected by multi-factor authentication where available.

7. Your rights

Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, and to withdraw consent. Because Suberry is local-first and account-free, much of your data is already under your direct control on your device. To make a request, contact us at support@suberry.app.

8. International users

RLAM FZCO is based in the United Arab Emirates, and our service providers may process data in other countries. By using the App, you consent to the transfer and processing of your information in accordance with this policy.

9. Children

Suberry is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the App.

11. Contact us

Questions about this policy or your data? Email support@suberry.app (RLAM FZCO).