Privacy

The short version

TotalSubs holds a list of subscriptions you typed in, and an email address if you gave us one. We never connect to your bank, never read your mailbox, and never sell anything about you to anyone. If you want it all deleted, one button in Settings does it permanently.

Three things we deliberately cannot do

These are architectural choices, not promises about our conduct — the capability does not exist in the product:

• We cannot see your bank account. TotalSubs does no bank linking and is not registered under India’s Account Aggregator framework. Every amount in your dashboard is one you entered or confirmed.
• We cannot read your mailbox. There is no Gmail or Outlook OAuth. Receipt forwarding works through a unique alias you forward mail to, so we only ever see the individual messages you choose to send.
• We never store card details. Payments run through Razorpay, which tokenises the card. Card numbers never reach our database.

What we store

Your account:

• Email address — only once you create an account. Anonymous sessions have none.
• Display name, if you set one.
• Your base currency, plan, and how many days before a renewal you want reminding.
• Your unique inbound forwarding alias, if you use receipt forwarding.

Your subscriptions — the substance of the product:

• Service name, price, currency, billing cycle, next renewal date, status and category.
• Whether you told us you still use a service, when we asked.
• Cancellations you record, which is what the savings figure is built from.

Receipts you send us, if you use that feature:

• The sender, subject and roughly the first 2,000 characters of a forwarded email, kept so you can check what a parse was based on.
• The fields extracted from it — merchant, amount, currency, cycle, date — and the model’s confidence.
• Nothing parsed is ever added to your dashboard automatically. It waits in a review queue until you confirm it.

Operational data:

• Push notification subscriptions, if you enable browser notifications.
• Which announcements you have read, so we don’t show them twice.
• Feedback you choose to send.

Analytics: events, never content

We record that something happened, never what it was about. Our analytics see subscription_added. They never see added Netflix ₹649. The name and price of anything you track stay in your account and are never sent to an analytics service.

There are no third-party advertising networks and no tracking scripts anywhere in the app. That is a permanent decision, not a current state.

Who else processes your data

We use these providers to run the product. Each receives only what its job requires:

• Supabase — the database and login system. Holds everything listed above.
• Vercel — hosting. Sees requests to the site.
• Anthropic — reads receipts you upload or forward, to extract the amount and merchant. It receives the receipt itself, which may contain personal details. It is not used to train models on your data.
• Razorpay — payments. Receives what it needs to charge you; we receive back only a payment status and a token.
• Resend — sends our email. Receives your address and the message.
• PostHog — product analytics, on US-hosted infrastructure. Receives event names as described above.
• Google — your browser fetches service logos from Google’s public favicon endpoint. It sees the domain of the logo requested, not who requested it.

Some of these are outside India, so your data may be processed abroad. We use providers that offer standard contractual protections for that transfer.

Your rights

• See and correct. Everything we hold is visible in the app, and every figure is editable. Prices we suggest are labelled as editable defaults precisely so you can overwrite them.
• Delete. Settings has a delete button. It removes your account and everything attached to it permanently and immediately. It is not a deactivation, and there is no recovery.
• Export. Settings has a Download all my data button. It gives you a JSON file containing everything listed above — your profile, your subscriptions, your receipts, your answers and the messages we’ve sent you. It leaves out the keys your browser uses to receive notifications, so the file can’t be used to send you anything. If you would rather we sent it, email privacy@totalsubs.app.
• Withdraw consent. Turn off reminders in Settings, or delete the account.

How long we keep things

Your account data stays until you delete it. Delete the account and it goes with it — subscriptions, receipts and all — through database-level cascades, not a scheduled cleanup job.

What we will never do

We will not sell your data, and we will not sell anything derived from it. That includes aggregated benchmarks, anonymised market intelligence, and churn data packaged for the companies you subscribe to. This is a permanent commitment and the business model does not depend on breaking it: TotalSubs makes money when you pay for TotalSubs.

Children

TotalSubs is not intended for anyone under 18. We do not knowingly collect data from children.

Grievances

Under the Digital Personal Data Protection Act, you may raise a complaint with our Grievance Officer, who must respond within a reasonable period:

• Grievance Officer: Sarthak Nirhali
• Email: privacy@totalsubs.app

Changes

If this notice changes in a way that affects you, we will tell you in the app before it takes effect. The date at the top is the last substantive revision.

Full company details are on the contact page.