Privacy Policy

SubDesk is an independent Android application published on Google Play under the package name app.subdesk. For the purposes of the EU and UK General Data Protection Regulation, the developer of SubDesk is the data controller for the personal data described in sections 03 and 04, and can be reached at mardevlopm@gmail.com.

Where SubDesk shows advertising, Google acts as an independent controller for the advertising data it collects. That relationship is described in section 05.

This policy covers the SubDesk Android app and this website. It does not cover any other app or site you reach through a link from either of them.

Everything you enter is written to a local database on your phone. The app is usable without an account, and in that mode none of the following ever leaves the device:

• Subscriptions — service name, price, currency, billing cycle, next renewal date, start date, trial state, category, colour, notes, and how many ways a cost is split.
• Payments you have recorded against a subscription, and the price-change history the app keeps so past months stay accurate.
• Recurring income entries, if you use the income feature.
• Payment method labels — the name you give a card or account, such as "Visa · personal". Never a number.
• App settings: your main currency, theme, language, reminder time and notification preference.

Uninstalling SubDesk deletes this local database. If you have not signed in, uninstalling is a complete erasure.

Notifications. Renewal reminders are generated on your device by a scheduled job. Nothing is sent to a server to produce one, and the reminder text is never transmitted anywhere.

Signing in is optional and the app tells you so. When you do sign in — with an email address and password, or with Google — two things happen.

Your account area is also where your settings copy lives, so a reinstall restores the app in the state you left it. The app writes a backup only when it has an internet connection, and only after you have signed in — it does not queue writes to be sent later without telling you.

You can remove all of this yourself. See Delete your data.

SubDesk is free and is funded by advertising supplied by Google AdMob. Ads appear as a banner on the home screen and as clearly labelled units inside some lists, and occasionally as a full-screen ad between screens.

Changing your mind. Open Settings → Ad privacy options inside the app. The same form reopens and your new choice takes effect immediately — ads already on screen are discarded and reloaded under the new setting. The row appears whenever your region requires it to be available.

What Google may collect. Subject to your choice, Google and its partners may process your device's advertising identifier, IP address, coarse location derived from that address, device and app information, and interactions with ads, in order to select, deliver, measure and report on advertising and to detect fraud. Google's own explanation is at business.safety.google/privacy, and the current list of advertising partners is available from the consent message itself and at Google's certified partner list.

Your advertising ID. Android lets you reset or delete the advertising identifier at any time in Settings → Privacy → Ads on your phone. That control belongs to the operating system and works independently of anything SubDesk does.

What SubDesk itself does not do. SubDesk does not run its own analytics, does not build a profile of you, does not share the contents of your subscription list with any advertiser, and does not use anything you typed into the app to target an ad. The advertising layer is kept entirely separate from your data: it never reads the local database or your account.

These are the only third parties the app communicates with. Each one is listed with what it receives and why.

Logo.dev and Frankfurter are contacted for the display of logos and exchange rates only. Neither request contains your account identifier, your prices, or anything that identifies you beyond the ordinary network metadata any web request carries.

If you are in the EEA or the UK, we rely on the following bases under Article 6(1) GDPR:

• Contract (Art. 6(1)(b)) — storing your subscriptions and settings, and backing them up to your account, in order to provide the app you asked for.
• Consent (Art. 6(1)(a)) — personalised advertising and the storing of, or access to, information on your device for that purpose. Given through the consent message and withdrawable at any time in Settings.
• Legitimate interests (Art. 6(1)(f)) — serving non-personalised advertising, keeping the service secure, and preventing invalid or fraudulent ad traffic. Balanced against your rights, and never used as a substitute for consent where consent is required.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

• On your device — until you delete the record or uninstall the app.
• In your account — until you delete the data or the account. Deleting the account removes the stored records; see Delete your data.
• Your consent choice — stored on your device by the User Messaging Platform. Google re-asks periodically as the framework requires, and you can reset it yourself in Settings.
• Advertising data held by Google — governed by Google's own retention schedules, not by us.

Under the GDPR and comparable laws you have the right to access your data, to correct it, to erase it, to restrict or object to processing, to withdraw consent, and to receive your data in a portable format.

SubDesk is a personal finance tool for adults. It is not directed to children, it is not enrolled in Google Play's Designed for Families programme, and we do not knowingly collect personal data from anyone under the age of 16 — or under the higher age of digital consent set by their country. The advertising request SubDesk sends is not tagged for under-age treatment, because the app is not offered to under-age users at all. If you believe a child has given us data, write to mardevlopm@gmail.com and we will delete it.

Every network request the app makes uses HTTPS. Your account area on the server is protected by rules that check the identity of the caller on every single read and write, and those rules reject any document containing a field that looks like a credential — a password, a PIN, a card number, an IBAN or a token — regardless of what a client tries to send.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority as the law requires.

Firebase Authentication, Cloud Firestore and Google AdMob are operated by Google, which processes data on servers in several countries including the United States. Where data is transferred out of the EEA or the UK, Google relies on the European Commission's Standard Contractual Clauses and the safeguards described in its own privacy resources.

If this policy changes, the effective date at the top of the page changes with it and the previous version stays in the repository's history, which is public. For a change that materially affects how your data is used, we will ask again through the app rather than rely on you re-reading this page.