Privacy Policy
Last updated: August 24, 2026 · Avaitus Digital
1. Overview
SubScan AI ("we", "our", "the app") is a subscription management application developed by Avaitus Digital. This Privacy Policy describes what data we collect, why we collect it, how we use it, and the choices you have.
By using SubScan AI you agree to the practices described in this policy. If you do not agree, please discontinue use of the app.
2. Google Sign-In
🔒
SubScan AI's use and transfer to any other app of information received from Google APIs will adhere to the
Google API Services User Data Policy,
including the Limited Use requirements.
What Google scopes we request and why
| Scope | What it allows | Why we need it |
|---|
openid, userinfo.email, userinfo.profile |
Your Google account email, name, and profile picture |
To create and sign you into your SubScan AI account. We do not access Gmail or any other Google product data. |
You can revoke Google sign-in at any time by visiting
myaccount.google.com/permissions
and removing SubScan AI.
3. Information We Collect
Account information
- Name, email address, and profile picture from your Google account or email/password signup via Firebase Authentication.
User-entered data
- Subscriptions you add manually: service name, amount, currency, billing date, and category.
- Reminder preferences and notification settings.
Usage & analytics data
- Basic, anonymized app usage events (e.g., "subscription added") to improve the product. No personal data is included in analytics events.
4. How We Use Your Information
- To display, manage, and organize subscriptions you add.
- To calculate monthly spending and predict upcoming payment dates.
- To send renewal reminders via email, push notification, WhatsApp, or SMS — only if you enable them.
- To generate AI-assisted negotiation or cancellation drafts for your subscriptions.
- To comply with legal obligations.
We will never use your data for any purpose not listed above without your explicit consent.
5. Data Sharing & Third Parties
We do not sell, rent, or share your personal data with third parties for their own commercial purposes. We use the following sub-processors strictly to operate SubScan AI:
- Google Sign-In — Identity (name, email, profile picture) to create and authenticate your account. We do not access Gmail.
- Firebase Authentication (Google) — Secure user sign-in and identity management.
- MongoDB Atlas — Encrypted cloud database for subscription and user data.
- Groq AI — Generates negotiation and cancellation drafts when you request them.
- Retell AI — Voice call automation for cancellation flows (only when you explicitly trigger a cancellation call).
All third-party processors are bound by data processing agreements and are only permitted to process data on our documented instructions.
6. Data Storage & Security
- All data is stored on MongoDB Atlas with encryption at rest (AES-256) and encryption in transit (TLS 1.2+).
- User authentication is managed by Firebase Authentication with industry-standard security controls.
- All client–server communication uses HTTPS.
- We apply the principle of least privilege: each internal service only accesses the data it requires.
7. Data Retention
- We retain your subscription and account data for as long as your account is active.
- When you delete your account, all associated data — subscriptions, user profile, OAuth tokens — is permanently deleted from our systems within 30 days.
- Anonymized, aggregated analytics data that cannot be traced back to you may be retained longer for product improvement.
8. Your Rights & Choices
- Access: Request a copy of all personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Delete your account and all associated data via Settings → Delete Account, or by emailing us.
- Revoke Google sign-in: Remove SubScan AI from Google account permissions.
- Data portability: Request an export of your subscription data by emailing us.
- Opt-out of reminders: Disable all notifications from Settings at any time.
To exercise any of these rights, email us at avaitusdigital@gmail.com. We respond within 30 days.
9. Children's Privacy
SubScan AI is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such data, we will delete it promptly. If you believe a child under 13 has provided us data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at this URL with a revised "Last updated" date, and by sending an in-app or email notification where required. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact:
Avaitus Digital
Email: avaitusdigital@gmail.com
← Back to SubScan AI