Privacy Policy

SubsTrack (package: uz.airsoft.substrack) is an app for tracking subscriptions and recurring payments. Developer: Islom Yuldashev (AirSoft). There is no sign-up and no account. We cannot see your subscriptions, amounts or profile: they are never sent to our server, because we don't have one. Below is everything the app processes.

Data stored only on your device

• Subscriptions: name, amount, currency, billing date and cycle, category, notes, reminder settings, price change history.
• Profile: the name or nickname you enter and your avatar. An avatar photo is chosen with the system photo picker and never leaves the device.
• Settings: language, theme, base currency, monthly budget, reminder time, sound, app lock and similar.

This data is stored encrypted on the device (SQLCipher database with an Android Keystore key). Android auto-backup is turned off.

Files you share yourself

With Premium you can create a backup file (encrypted with a password you choose) or a CSV export. These files go only where you send them. We never receive them. A forgotten backup password cannot be recovered.

App lock

Fingerprint, face or screen-lock checks are done by Android itself. The app never receives or stores biometric data.

Network connections

• Exchange rates: the public rate list of the Central Bank of the Republic of Uzbekistan (cbu.uz) is downloaded. No personal data is sent with the request.
• Google Play Billing: Premium purchases are handled by Google Play. We never see your payment details. The app only checks the purchase status. See the Google Privacy Policy.
• Google Play updates: the app checks Google Play for a newer version.
• Firebase Cloud Messaging (Google): used for general announcements about the app. Firebase gives the device an identifier (push token). We don't send this token to any server of ours.
• Firebase Crashlytics (Google): if the app crashes, a crash report is sent. It contains the stack trace, device model, OS and app version and an installation identifier. Your subscriptions, amounts and name are never included. You can turn crash reports off in Settings.

Country detection

If the Premium price can't be loaded from Google Play (for example, while offline), the app shows an approximate price. To pick it, the country is read from the SIM card, mobile network or system language. This stays on the device and is never sent anywhere.

Ads and tracking

There are no ads. The advertising ID is not used, there is no analytics SDK and no data is sold to third parties.

Permissions

Notifications (billing reminders), exact alarms and start after reboot (to reschedule reminders), biometrics (app lock), internet (rates, Play and Firebase).

Children

The app is not directed at children and does not knowingly collect data from children under 13.

Deleting your data

There is no account, so all your data lives on your device. To delete it, use Settings → "Clear all data" or uninstall the app. Crashlytics reports are kept by Google for up to 90 days.

Changes and contact

If this policy changes, this page and the date above will be updated. Questions: islomyuldashev3007@gmail.com