Privacy Policy

Last updated: March 10, 2026

Imaginelle Labs ("we", "us", "our") operates the Subflo mobile application ("App"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

We believe in transparency and minimal data collection. Subflo is designed to keep your data on your device. We do not maintain user accounts, and we do not sell your data to third parties.

1. Information We Collect

1.1 Data Stored Locally on Your Device

The following data is stored only on your device in a local database and is never sent to our servers:

Subscription information: Names, prices, billing cycles, start dates, renewal dates, currency, end dates, and notes for subscriptions you add
Payment history: Records of past and expected payments generated from your subscription data
App settings: Your preferences such as notification time, local currency, exchange rate, and feature flags

This data remains entirely on your device unless you explicitly choose to back it up to Google Drive.

1.2 Data Processed by Our Services

When you use certain features, limited data is sent to external services:

Voice Input (Pro): Your audio recording is sent for transcription and subscription field extraction. It is processed in real-time and not stored.
Google Drive Backup (Pro): Your subscription database is uploaded to your personal Google Drive for backup. It remains there until you delete it.
Currency Exchange Rates: A public API is called to fetch current USD exchange rates. No personal data is sent.
In-App Purchases: Purchase transaction data is processed by Apple, Google, and RevenueCat to verify and manage your Pro status.

1.3 Data We Do NOT Collect

We do not collect your name, email address, or phone number (unless you sign in to Google for backup)
We do not track your location
We do not use analytics or tracking SDKs
We do not collect device identifiers for advertising
We do not read your contacts, photos, or other personal files

2. How We Use Your Information

We use the limited data we process to:

Provide the App's core features: Tracking subscriptions, calculating payment history, and scheduling renewal reminders
Process voice input: Converting your speech to text and extracting subscription details (Pro feature, only when you initiate it)
Enable cloud backup: Saving and restoring your data to your Google Drive (Pro feature, only when you initiate it)
Manage purchases: Verifying your Pro purchase status through RevenueCat
Prevent abuse: Rate-limiting voice input requests to maintain service quality

3. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

Google (Firebase Authentication, Google Drive, Google Sign-In) — Authentication, cloud backup, and restore. Privacy Policy
RevenueCat — In-app purchase management. Privacy Policy
Groq — Voice transcription and text processing. Privacy Policy
Cloudflare — Hosting the voice processing service. Privacy Policy
Open Exchange Rates — Currency exchange rate data. Website

4. Permissions

The App requests the following device permissions:

Notifications: To send you renewal reminders at your preferred time. You can disable this in your device settings.
Exact Alarms (Android): To schedule precise reminder notifications. Required for timely delivery on Android 12 and later.
Microphone: To record your voice when using the voice input feature. Only accessed when you tap the microphone button. Audio is not recorded in the background.
Internet: Required for voice processing, Google Drive backup, currency exchange rates, and purchase verification.

All permissions are optional. The App functions without them, though some features may be unavailable.

5. Data Storage and Security

Local storage: Your subscription data is stored in an SQLite database on your device. It is protected by your device's security (screen lock, encryption).
Data in transit: All network communication uses HTTPS encryption.
Voice data: Audio sent to our voice processing service is transmitted over HTTPS and is not stored after processing.
Google Drive backups: Protected by your Google account security. We use the drive.file scope, which limits our access to only files created by Subflo.

6. Data Retention

Local data: Retained on your device until you delete it within the App or uninstall the App.
Google Drive backups: Retained in your Google Drive until you delete them. We do not maintain copies.
Voice recordings: Not retained. Processed in real-time and immediately discarded.
Purchase records: Managed by Apple, Google, and RevenueCat per their retention policies.

7. Your Rights and Choices

You have full control over your data:

Access: All your data is visible within the App at all times.
Delete: You can delete individual subscriptions, payment records, or all data by uninstalling the App.
Backup control: You choose whether to enable Google Drive backup. You can delete backups from your Google Drive at any time.
Permissions: You can revoke any permission at any time through your device settings.
Notifications: You can disable notifications per subscription or entirely through device settings.

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete such information.

9. International Data Transfers

When you use the voice input feature, your audio data may be processed on servers located in the United States. By using this feature, you consent to the transfer of this data to the United States for processing. The data is not stored after processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at:
support@imaginelle.ai