Privacy Policy
Last updated: March 24, 2026 · Subsight is built with privacy-first principles. We collect the minimum data necessary, store it in your own database, and never sell it.
Information We Collect
Subsight collects the minimum information necessary to provide the service. This includes your email address for account creation, subscription data you manually enter (service names, amounts, billing cycles), and usage metadata such as feature interactions never content. We do not collect financial account credentials, bank data, or payment card information.
How We Use Your Information
Your data is used solely to: (1) provide and improve the Subsight service, (2) send renewal alerts and account notifications you have opted into, and (3) generate AI-powered spending insights using your subscription data. We never sell, rent, or share your personal data with third parties for marketing purposes.
Data Storage & Security
All subscription data is stored in your own Supabase PostgreSQL database. Subsight uses Supabase's Row Level Security (RLS) to ensure users can only access their own data. Data is encrypted in transit (TLS 1.3) and at rest (AES-256). If you self-host, you have complete control over your own data infrastructure.
AI Features (Groq)
When you use AI auto-fill, your subscription name is sent to Groq's API to generate metadata suggestions. Subsight does not store these API requests beyond the immediate session. Groq's privacy policy governs how they handle API inputs. You can use Subsight without providing a Groq API key AI features are entirely optional.
Cookies & Tracking
Subsight uses only functional cookies necessary for authentication (Supabase session tokens) and your theme preference (localStorage). We do not use advertising cookies, third-party tracking scripts, Google Analytics, or any behavioral analytics services.
Data Retention & Deletion
Your data is retained until you delete your account. To request data deletion, email us or delete your Supabase project directly. Self-hosted users have complete control and can wipe their database at any time. We do not retain backup copies of your data after account deletion.
Your Rights
You have the right to: access all data we hold about you, correct inaccurate information, request deletion of your data, export your data in standard formats (JSON, CSV), and withdraw consent for optional features at any time. Contact us at privacy@subsight.io to exercise any of these rights.
Contact
For privacy questions or requests, contact us at privacy@subsight.io or open an issue on our GitHub repository at github.com/MuhammadTanveerAbbas/Subsight-Tracker. We respond to all privacy requests within 30 days.