Privacy Policy

1. Summary

• Your core subscription database is stored locally on your device using SQLite.
• SubsCraft does not connect to your bank account, scrape your email, or sell personal data.
• Account authentication is handled by Clerk.
• AI features (AI Craft and AI Saving) are optional and send only the content you choose to submit — text, images, audio, context, and the subscription records you select for a savings report.
• AI results and savings reports are automated suggestions for reference only.
• Push tokens are registered only if notifications are available and allowed.
• You can manage account details, change your password, or request account deletion through Account Management.

2. Information you provide or create

3. Information collected automatically

SubsCraft may process app settings, language, region-derived default currency, date format, notification preferences, exchange-rate cache metadata, AI credit/quota information, AI job status, backend error responses, and basic device/platform information needed for push token registration.

If you enable notifications and a backend is configured, SubsCraft may register an Expo push token, platform type (iOS or Android), and an app-generated device ID with our backend. The device ID is generated by the app and stored in secure storage. It is used to manage push token registration, not to track you across unrelated apps.

4. Device permissions

SubsCraft requests permissions only when needed for app features:

• Notifications: to send local renewal/trial reminders and AI job completion or failure notifications.
• Photos / media library: to let you select a custom service logo or submit screenshots/photos to AI Craft.
• Microphone: to record a short voice note for AI Craft parsing.

You can change permissions in your device settings. If you deny a permission, the related feature may not work, but the rest of the app can still be used.

5. How information leaves your device

The current production release does not provide cloud sync for your full subscription database. However, some features send limited data off-device:

• Authentication: account data and session data are processed by Clerk.
• AI Craft text jobs: text and local context such as default currency, language, categories, and custom services are sent to our backend.
• AI Craft photo/voice jobs: file manifests are sent to our backend, then selected files are uploaded using backend-issued presigned Cloudflare R2 upload URLs. The backend verifies uploaded objects and queues AI parsing.
• AI Saving jobs: details of the recurring subscriptions you select are sent to our backend and AI-processing providers to generate a savings report.
• AI job results: job status, parsed results, savings reports, credit use, and error messages may be returned by the backend and cached locally.
• Push notifications: Expo push tokens may be sent to our backend and to Expo/platform notification services so AI job updates can be delivered.
• Exchange rates: the app may request exchange rates directly from Frankfurter using a currency code such as USD or AUD.

6. How we use information

We use information to:

• provide account sign-in and profile features;
• store, display, edit, and calculate your subscription records on device;
• schedule local renewal, trial, and expiration reminders;
• process AI Craft and AI Saving jobs and return suggested subscription records or savings reports;
• manage AI credits, quotas, job history, and job status;
• send AI job completion/failure notifications if enabled;
• refresh and cache exchange rates for display conversions;
• maintain security, prevent abuse, debug errors, and comply with legal obligations.

7. Sharing and service providers

We do not sell your personal data. We may share or process data with service providers only as needed to operate SubsCraft, including:

• Clerk for authentication and account management;
• Expo Push Service and Apple/Google notification services for push delivery;
• Cloudflare R2 or equivalent object storage for AI Craft media uploads;
• AI-processing providers used by our backend to process submitted AI inputs (AI Craft parsing and AI Saving analysis);
• Frankfurter for exchange-rate requests;
• Apple App Store and Google Play platform services for app distribution and platform features.

We may also disclose information if required by law, to protect rights and safety, to investigate abuse, or in connection with a business transaction such as a merger or acquisition.

8. Data retention

• Local app data: stays on your device until you delete it through app actions, sign out, uninstall the app, clear app storage, or change devices without transferring data.
• AI job history: local AI job records are controlled by the AI job retention setting, defaulting to the most recent 7 jobs unless you choose another option.
• AI server data (AI Craft and AI Saving): backend job records, submitted inputs, and uploaded media are retained only as long as reasonably needed to process jobs, provide status/results, prevent abuse, debug issues, and comply with legal obligations.
• Push tokens: may be stored until you sign out, disable/unregister notifications, delete your account, or the token is replaced or no longer valid.
• Account data: is retained while your account exists, then deleted or anonymized after a valid deletion request unless we need to retain limited information for security, fraud prevention, dispute resolution, or legal compliance.

9. Account and data deletion

You can manage your SubsCraft account details, change your password, and request deletion of your SubsCraft account and associated server-side account data through Account Management at https://accounts.daycraftai.com/sign-in.

After the account deletion request is verified, we will delete or anonymize account data and server-side data associated with the account, including backend AI job records and registered push tokens, unless retention is required for security, fraud prevention, dispute resolution, or legal compliance.

Local data stored only on your device may not be reachable by us. To remove local data from a device, sign out in the app, uninstall the app, or clear app storage. In the current release, signing out clears local business data from that device.

10. Security

We use reasonable technical and organizational safeguards appropriate for the current release. Network requests use HTTPS where applicable. Authentication is handled through Clerk. Push device IDs and last registered push tokens are stored using secure storage APIs where available. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

11. Children

SubsCraft is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps.

12. International processing

We are based in Australia, and our service providers may process data in Australia, the United States, the European Union, and other locations where they operate. By using SubsCraft, you understand that information may be processed outside your country of residence.

13. Changes to this policy

We may update this Privacy Policy when the app changes or when legal, platform, or operational requirements change. We will update the effective date above and, when appropriate, provide additional notice in the app or on our website.

14. Contact

DaycraftAI Pty Ltd
Privacy contact: support.subscraft@daycraftai.com
Website: https://daycraftai.com