What SubExit stores, what it deliberately does not, and how to get any of it back or removed.
In effect from 26 August 2026
SubExit is made by MADASU Limited, a company registered in England and Wales (company number 16607990), of Office 13463, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom. In this policy, "we" means MADASU Limited, and we are responsible for the data described below.
This is true whichever store you installed from. The App Store lists an individual developer account held by the company's director; the controller responsible for your data is MADASU Limited.
You can reach us about anything on this page at help@subexit.app.
SubExit is a manual subscription tracker. You type in your own subscriptions and it reminds you before they renew.
It does not connect to your bank, read your email, or see any of your transactions. There is no way for it to, because it never asks for access to them.
You can use the whole app without an account. If you never sign in, your subscriptions never leave your device. The only thing the app sends while you are signed out is a check with our payments provider for whether Pro is active, and a request for published currency rates. Neither one carries anything you typed.
We do not sell your data, share it with advertisers, or use it to build a profile of you.
Everything you enter (subscription names, prices, renewal dates, why you subscribed, your notes, your decisions, and your cancellation notes) is stored in a database on your device.
Your reminders are scheduled by your phone itself. No server is involved in deciding when to notify you, and no notification content is sent anywhere.
If you never create an account, none of it is copied anywhere. Deleting the app deletes it.
Creating an account is optional and exists so your subscriptions survive a lost phone and appear on a second device.
If you sign up we store: your email address, an encrypted form of your password, your display name and date of birth if you choose to provide them, and a copy of the subscription data described above.
This is held by Supabase on our behalf, on servers in Stockholm, Sweden (EU). Access is restricted at the database level so that your rows can only be read by your own account.
If you sign in with Apple or Google instead, we receive the email address that provider gives us and nothing more. We never receive your password.
No bank or card details. SubExit is not connected to any payment network and cannot see what you are actually charged.
No email or inbox access.
No advertising identifiers, no ad networks, and no third-party analytics or tracking SDKs.
No location data.
No contacts, photos, files, or anything else on your device outside the app.
Supabase hosts your account and the synced copy of your data, only if you create an account.
Apple and Google process any purchase you make. They tell us whether a purchase is active; they do not give us your payment details.
RevenueCat tells the app whether your Pro purchase is active. This happens whether or not you have an account, because a purchase belongs to your App Store or Google Play account rather than to ours. If you are signed in it receives the same identifier your account uses; if you are not, it receives a random one that means nothing outside this app. Either way it receives the purchase information the stores provide, and nothing you typed.
exchangerate-api.com supplies published currency rates. The app only asks it for a public list of rates. Nothing about you or your subscriptions is sent.
Export it. Settings → Backup and export produces a CSV file of your subscriptions that is yours to keep.
Delete it. Settings → Delete all subscriptions removes everything from your device. If you have an account, deleting the account removes the synced copy as well.
Ask us. Email help@subexit.app and we will tell you what we hold about you, correct it, or delete it.
Data in your account is kept until you delete it or delete your account.
After an account is deleted, backups are cycled out within 30 days.
Decision history older than two years is removed automatically, because a decision you made about a subscription two years ago no longer tells you anything useful.
SubExit is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email help@subexit.app and we will remove it.
If this policy changes in a way that affects you, the app will tell you before the change takes effect rather than quietly updating the date at the top.
Get in touch
help@subexit.app