Privacy Policy for Veritas Subscription Guard
Last Updated: August 3, 2026
Veritas Subscription Guard (“we”, “our”, or “us”) respects your privacy. This Privacy Policy explains how the application operates, how your data is handled, and what your rights are.
1. Two modes: local-only by default, cloud sync only if you ask
Veritas Subscription Guard runs in one of two modes. Local-only is the default, and the app is fully functional in it — no feature is withheld to push you toward an account.
Local-only mode (default, no account)
- Everything you enter — subscription names, prices, renewal dates, categories, notes, images, payment method labels, profile details, and settings — is stored exclusively on your device.
- Nothing is uploaded. No account exists. No network request carrying your data is made.
- Spending insights, the health score, search, and the service catalog all run on your device. They are ordinary arithmetic over data you already entered, not a machine-learning service, and computing them sends nothing anywhere.
Cloud sync mode (only after you sign in)
- Signing in is a deliberate action you take. Until you do, the cloud portion of the app is inert.
- Once signed in, your subscription records are synchronised to Google Firebase (Firestore) so they survive a lost device and appear on your other devices.
- Your device remains the source of truth. The app works offline, and changes made offline upload when you reconnect.
- Signing out returns the app to local-only mode. Your local data is not deleted when you sign out.
2. What is stored in the cloud when sync is on
Only what is needed to reproduce your subscription list on another device:
- Subscription records — name, price, currency, billing cycle, renewal and start dates, category, notes, payment method label, trial details, price history, cancellation URL, and the sync bookkeeping fields (a timestamp and a revision number).
- Your account identifier and, if you registered with email, your email address.
- If you attached an image to a subscription, the file path of that image within the app’s own storage. The image file itself is never uploaded, which is why an attached image does not appear on your other devices.
Not uploaded: your image files, device identifiers, contacts, location, advertising ID, or browsing activity.
Cloud data is stored under your account and is readable and writable only by your account. This is enforced by server-side security rules that deny access by default, not only by the app.
3. Deletion
- Delete a subscription: it is removed from your device and marked deleted in the cloud so the deletion reaches your other devices.
- Delete your account: removes your authentication record and the subscription data held under it.
- Stop syncing without deleting anything: sign out. The app returns to local-only mode and your device keeps its copy.
4. Analytics and crash reporting
Analytics collection is disabled by default and is not switched on without your consent. The app ships with Firebase Analytics auto-collection turned off at the manifest level.
Veritas Subscription Guard contains no third-party advertising SDKs and no behavioural tracking.
5. Permissions and why they are requested
- Notifications (
POST_NOTIFICATIONS)
- Purpose: local alerts for upcoming renewals and expiring trials.
- Handling: schedules are held by your operating system’s local notification service. Reminders do not involve a server.
- Storage / file access
- Purpose: exporting your data to a file and importing a backup.
- Handling: file operations happen strictly between the app and the location you pick.
- Photos
- Purpose: attaching a custom logo or image to a subscription.
- Handling: images are stored in the app’s sandboxed storage. They are not uploaded.
- Network access
- Purpose: cloud sync, and only when you are signed in.
- Handling: unused in local-only mode.
- Biometrics (
USE_BIOMETRIC)
- Purpose: unlocking the app with a fingerprint or face, if you turn the app lock on and enable the shortcut.
- Handling: the comparison is performed by your operating system. The app receives only a yes or no; it never sees or stores biometric data. Your PIN is stored only as a salted one-way digest, which means it cannot be recovered — including by us.
The app lock controls access to the running app. It is not disk encryption: someone with the device unlocked and the right tools could still read the app’s stored file. Encrypted storage is planned, and until it ships this is stated plainly rather than implied away.
6. Third-party services
When — and only when — you enable cloud sync, your data is processed by Google Firebase (Authentication and Cloud Firestore) acting as our data processor. Google’s handling of that data is governed by the Firebase Privacy and Security policy.
In local-only mode no third-party service receives your data.
7. Export
From Settings → Backup & Sync → Export a backup you can produce a complete copy of your subscriptions and settings at any time, in either mode. The copy is handed to your device’s share sheet, so you choose where it goes — email it to yourself, save it to a notes app, or put it in cloud storage you control. It leaves the app only to the destination you pick.
Restore from a backup reads a file you choose from your device. The app reads only the file you pick, and only when you pick it.
8. Children
Veritas Subscription Guard is not directed at children under 13 and we do not knowingly collect their data.
9. Changes to this policy
We may update this policy. Material changes will be reflected here and in the app’s store listing, with the “Last Updated” date revised.
Questions about this policy, requests to access or delete your data, and any
other privacy concern can be sent to:
dhungel9814@gmail.com
We aim to respond within 30 days. Because the app is offline-first, most data
requests you might make can also be satisfied entirely on your device — see
Settings → Privacy & Data, which can export everything the app holds about you
and erase it.