At SubCut, we take your privacy seriously. This Privacy Policy describes how SubCut (operated by K&D Labs) collects, uses, stores, and protects your information when you use our mobile application ("App") and associated services.
1. Introduction
SubCut is a subscription tracking application that helps users monitor and manage their active recurring subscriptions. By connecting your bank accounts securely through third-party services, we identify subscription charges and provide analytics to help you reduce unwanted expenses.
2. Information We Collect
We only collect the minimum amount of data necessary to provide the subscription tracking service:
- Transaction Data: Transaction descriptions, amounts, dates, and recurring patterns retrieved via the Plaid API.
- Account Info: Your email address and basic authentication identifiers used for creating and logging into your account.
- Bank Link Metadata: Non-sensitive tokens (such as Plaid access tokens) to maintain connection with your financial institution.
We do not collect or store your bank credentials, account numbers, routing numbers, Social Security Numbers (SSNs), or credit card details.
3. How We Use Your Data
We use your transaction and subscription details solely for:
- Auto-detecting and categorizing your active subscriptions.
- Alerting you of upcoming billing cycles and renewal costs.
- Providing statistics and suggestions to help you optimize your spending.
- Providing account support and troubleshooting issues.
We do not sell, rent, or lease your personal or financial data to advertisers, brokers, or third parties for any marketing purposes.
4. Plaid Integration
To gather your transaction data, SubCut connects to your financial accounts using Plaid Inc. ("Plaid"). Your login details and bank credentials are handled directly and securely by Plaid under their security systems.
By connecting your accounts, you acknowledge and agree that Plaid will process your data in accordance with their own policies. For more details on Plaid's data practices, please review the Plaid End User Privacy Policy.
5. Data Storage and Security
All retrieved information is stored on Supabase, a SOC 2 Type II compliant managed database infrastructure.
- Encryption at rest: Data is encrypted using AES-256 standards.
- Encryption in transit: Connections use TLS 1.2 or higher.
- Access Controls: Database entries are secured using Row-Level Security (RLS) configurations, ensuring users can only read and write their own records.
6. Data Retention
We enforce strict data minimization timelines to reduce exposure:
- We retain raw transaction data for a maximum of 12 months, which is sufficient for subscription pattern matching.
- Subscription records and account metadata are retained for the duration of your active account.
- For detailed information, please read our full Data Retention and Disposal Policy.
7. Your Rights
You retain full control over your data. At any time, you have the right to:
- Access: Request a copy of all information stored under your account.
- Disconnect: Revoke bank connections, immediately halting Plaid transaction sync.
- Delete: Request full erasure of your account. We purge database records and revoke Plaid links within 30 days of account deletion.
To execute these rights, disconnect your bank within the App settings or contact us at hoang.tr.tr.2025@icloud.com.
8. Children's Privacy
SubCut is not directed at children under the age of 13. We do not knowingly collect personal information from individuals under 13 years of age.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material modifications, we will post the revised policy here and notify you through the App.
10. Contact Us
If you have any questions or feedback regarding this policy, please reach out to us:
K&D Labs
App Publisher, SubCut
Email: hoang.tr.tr.2025@icloud.com