Your subscriptions are your business. SubFlow is built so your financial data stays on your device — private, secure, and entirely under your control.
SubFlow is designed from the ground up with your privacy as the default. Your financial data — subscriptions, amounts, renewal dates, payment history — never leaves your device. There are no user accounts, no cloud sync, and no analytics SDKs that harvest personal information.
SubFlow is a local-first app. All data is stored exclusively on your iPhone using Apple's on-device storage. We cannot access, view, or recover your data.
This Privacy Policy explains what limited information may be processed when you use the app and how we handle it. If you have questions, contact us anytime.
We separate data into two categories: data that stays entirely on your device, and the minimal technical data that may reach our infrastructure.
| Data type | Where it lives | We can see it? |
|---|---|---|
| Subscriptions, amounts, renewal dates | On-device only | Never |
| Payment history | On-device only | Never |
| Receipt photos | On-device only | Never |
| Notification preferences | On-device only | Never |
| App Store purchase receipt | Apple servers | Apple only |
| Crash reports (if enabled) | Apple servers | Anonymized |
Purchases & subscriptions. If you upgrade to SubFlow Pro, the transaction is handled entirely by Apple's App Store. We receive only a non-personal purchase receipt token to verify your entitlement. We never see your payment card, billing address, or Apple ID.
Crash diagnostics. If you have opted in to sharing diagnostics with developers in your iOS Settings, Apple may share anonymized crash logs with us. These contain no personal data, subscription amounts, or identifiable information.
The app may request the following iOS permissions. Every permission is optional — the app works without them.
You can revoke any permission at any time in iOS Settings → SubFlow. Revoking a permission does not delete your existing subscription data.
Because all data is stored locally on your device, you are in full control of retention and deletion.
We hold no server-side copy of your data, so there is nothing for us to delete on our end.
SubFlow is intended for users aged 4 and older and is rated 4+ on the App Store. The app does not knowingly collect personal data from anyone. Because all data is entered and stored locally by the user, there is no mechanism for the app to collect children's information.
If you believe a child has accidentally stored sensitive information in the app, you can remove it by deleting that subscription or payment record directly in the app, or by deleting the app entirely.
We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective date at the top of this page and note the change in the App Store release notes. Continued use of the app after a policy change constitutes acceptance of the new terms.
Because we don't have your email address, we cannot notify you directly — we recommend bookmarking this page if you'd like to stay informed.
If you have questions, concerns, or requests related to this Privacy Policy, please reach out:
This policy was last reviewed on June 19, 2026. Effective date: June 19, 2026.