Privacy Policy

Last updated: September 2026

SubGuardian is a recurring-payment and subscription organiser operated by Cruz Enterprises Pty Ltd. This policy explains the information handled by the SubGuardian mobile app and public website.

Information you provide and local app data

You may enter or import subscription names, amounts, currencies, renewal dates, billing frequency, categories, notes, cancellation links, reminders, and related records. These records are primarily stored on your device. Files you export or save remain wherever you choose to store or share them.

Account and sign-in data

Premium and account-based services use a trusted authentication service. Depending on your choice and device, you may sign in with email and password, Google, or Apple. The service may process your email address, a profile name where supplied by the chosen provider, sign-in provider, unique account identifier, email-verification state, account status, and limited network, app/device, and security information needed to authenticate you and protect service requests. SubGuardian does not receive your Apple or Google password. Email-and-password credentials are handled by the authentication service.

Premium and store information

Apple App Store and Google Play handle billing and payment credentials. SubGuardian does not receive your full card details. To provide Premium, the app sends the product and purchase-verification information needed for a trusted backend to check the store entitlement and associate it with the signed-in account.

Manual encrypted cloud backup and restore

Eligible signed-in Premium users can manually create and restore cloud backups. Backup content is encrypted on the device with a recovery passphrase before the encrypted file is uploaded to a trusted cloud-service provider; limited account and operational backup metadata is processed separately. Cruz Enterprises cannot read the encrypted backup content through the normal service architecture. You initiate each backup or restore. Automatic or continuous cloud sync is not currently available. Keep the recovery passphrase safe: support should never ask you to email it.

Document scanning and OCR

When you choose a photo or scan a document for import, text recognition runs on your device using Apple Vision on iOS or Google ML Kit Text Recognition on Android. The selected image and recognised text are not sent to Google or Cruz Enterprises as part of OCR processing. On Android, Google ML Kit separately sends limited technical SDK information to Google, including relevant app/device information, per-installation identifiers, performance and latency information, API or feature configuration, feature events, and error codes, for diagnostics, maintenance, service improvement, and related usage analytics. Cruz Enterprises does not receive or use those ML Kit metrics in its own analytics systems. You review detected information before relying on it.

How information is used

Information is used to provide subscription tracking, renewal reminders, import/export, account access, Premium entitlement, manual encrypted backup/restore, security, support, and service reliability.

Analytics, crash reporting, and ads

SubGuardian does not currently use app analytics, crash-reporting, or advertising services for Cruz Enterprises' own collection of app-usage data. The Google ML Kit technical metrics described above go to Google and are not part of a Cruz Enterprises analytics system. The app remains ad-free.

Website delivery

The public website is delivered by a website hosting and security provider, which may process ordinary web-request and security information needed to deliver and protect the site.

Service providers and processing locations

Relevant providers may include trusted authentication, cloud, and backend service providers; Apple and Google for sign-in and app-store services; Google for the ML Kit technical processing described above; and a website hosting and security provider. These providers process information under their own terms and may process it in locations where they operate. We do not sell personal information.

Security

We use technical safeguards designed to protect information processed by SubGuardian. SubGuardian's cloud backups are encrypted. No online or electronic system can guarantee absolute security.

Retention and account deletion

Local records remain under your device control. When a verified SubGuardian account-deletion process completes, the account and associated account/cloud data, including hosted encrypted backups, are deleted. Records stored only on your device and files you exported are not remotely erased.

Where permitted by applicable law, we may retain a limited security record that does not include your name or email, solely to help prevent fraud or an old store purchase being linked to the wrong account. That record is limited to the store platform, a one-way security reference, recovery/deleted status, and minimal timestamps. Personalized deleted-account lifecycle history is not retained.

If a valid active Premium purchase is later recovered into a new account after secure store verification, Premium access may return. Deleted account data, cloud backups, and account history do not return.

Your choices, access, and correction

You can edit or delete local subscription records in the app, manage exported files where you saved them, and request account deletion. See Delete your SubGuardian account. For privacy questions, access or correction requests, or complaints and inquiries, email support@subguardian.com.

Privacy rights

Depending on where you live, applicable privacy laws may give you rights in relation to personal information we hold about you, including the right to request access, correction, deletion, or information about how it is used. These rights may be subject to legal exceptions and identity-verification requirements. To make a privacy request, contact support@subguardian.com. We will handle your request in accordance with applicable law.