SubTrack AI

Privacy Policy

Last updated November 2, 2026

This Privacy Policy explains how SubTrack AI ("SubTrack AI", "we", "us" or "our") collects, uses, stores, shares and protects information when you use the SubTrack AI web application at https://aidigital.company (the "Service"). SubTrack AI helps you keep track of the AI tools you subscribe to, how much you spend on them, and when they renew. By using the Service you agree to the practices described here.

1. Who we are

SubTrack AI is operated by its developer, who can be contacted at jkeirle@gmail.com. We are the party responsible for the personal information processed through the Service.

2. Information we collect

We collect only the information needed to provide the Service:

  • Account information from Google Sign-In: your name, email address, profile picture and a unique Google account identifier. We use this to create your account and sign you in.
  • Subscription information you enter: tool names, prices, currency, billing cycle (monthly or yearly), renewal dates and any notes you add.
  • Gmail data (only if you choose to connect Gmail): see Section 3 for exactly what is accessed.
  • Email text you paste: if you use the "Paste an email" feature, we process the text you paste to fill in subscription details.
  • Technical information: basic logs such as IP address, browser type, and error reports, kept by our hosting provider to keep the Service secure and working.

We do not collect payment card numbers, bank details, or passwords.

3. Google user data: what we access and why

If you choose to connect your Gmail account, we request these Google permissions (scopes):

  • userinfo.email and userinfo.profile — to identify which Google account is connected.
  • gmail.readonly — read-only access to your Gmail so we can find receipts and billing emails from AI services (for example OpenAI, Anthropic, Cursor, Midjourney).

When you click "Scan Gmail", the Service:

  • Searches your mailbox for messages from known AI-service billing senders.
  • Reads only these parts of matching messages: sender, subject, date, and Gmail's short preview text (snippet). We do not download full email bodies or attachments.
  • Extracts the service name, amount, currency and charge date, and saves those details to your account as a subscription and a charge record.

We do not store the contents of your emails. We do not read emails that are not from AI-service billing senders. We never send, edit, label, move or delete any email. We cannot access your Google password.

Gmail data is not sent to any AI model. Only text you paste yourself into the "Paste an email" feature is processed by AI (see Section 5).

4. Google API Services User Data Policy — Limited Use

SubTrack AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We use Google user data only to provide and improve the subscription-tracking features you can see in the app.
  • We do not transfer Google user data to others except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
  • We do not use or transfer Google user data for serving advertisements, including retargeting or personalized ads.
  • We do not sell Google user data to anyone, including data brokers.
  • We do not use Google user data to determine credit-worthiness or for lending purposes.
  • We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
  • No person reads your Google user data unless you give us explicit permission for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with law, or the data has been aggregated and anonymized for internal operations.

5. How we use information

  • To create and secure your account and sign you in.
  • To show your AI subscriptions, total monthly and yearly spend, and upcoming renewals.
  • To detect subscriptions from Gmail receipts when you ask us to scan.
  • To read emails you paste: the pasted text is sent to an AI service through Lovable AI Gateway solely to extract the service name, price, billing cycle and renewal date. The text is not stored by us after the details are returned and is not used to train AI models.
  • To fix bugs, prevent abuse, and keep the Service secure.
  • To respond to your questions and requests.

We do not use your information for advertising or marketing, and we do not sell personal information.

6. How we share information

We do not sell or rent your information. We share it only with service providers that help us run the Service, under obligations to protect it and use it only on our behalf:

  • Lovable (Lovable Cloud) — hosts the website and the database where your account and subscription records are stored, and provides the secure connection to Gmail.
  • Lovable AI Gateway and its AI model provider — processes only text you paste into the "Paste an email" feature.
  • Google — provides sign-in and, if you connect it, Gmail access.

We may also disclose information if required by law, to protect the rights or safety of users or others, or as part of a business transfer, in which case this policy will continue to apply.

7. Storage, security and retention

  • Data is stored in a secured database with access rules so each user can only see their own records.
  • All traffic is encrypted in transit using HTTPS.
  • The key that lets us access your Gmail is encrypted (AES-256) on our servers and is never sent to your browser.
  • We keep your account and subscription records for as long as your account is active. Gmail access stays in place until you disconnect it.
  • When you disconnect Gmail, we delete the stored Gmail access key. When you delete your account, we delete your account, subscriptions and charge records within 30 days, except where we must keep information to comply with the law.

8. Your choices and rights

  • Disconnect Gmail at any time from your dashboard, or remove access from your Google account permissions.
  • Edit or delete any subscription in your dashboard.
  • Access, correct, export or delete your data, or delete your account, by emailing jkeirle@gmail.com. We respond within 30 days.
  • Depending on where you live (for example the EU, UK or California), you may have additional rights such as objecting to processing or lodging a complaint with a data protection authority.

9. Cookies and local storage

We use only essential browser storage to keep you signed in and remember setup progress. We do not use advertising or third-party tracking cookies.

10. Children

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.

11. International transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

12. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify you in the app or by email.

13. Contact us

Questions or requests about privacy: jkeirle@gmail.com