Privacy Policy

Controller and scope

Subscription Radar is published in Türkiye by Özkan Altınörs under the Gepetto Usta brand. This policy applies to the Android version with Google Play package com.abonelikradari.app. Privacy questions may be sent to ozkanaltnors@gmail.com.

Boundaries of the Google Play version

The Google Play version does not read SMS or Gmail, connect to bank accounts, transfer money or make payments. The free version may show a banner ad on Home provided by Google Mobile Ads; after Pro entitlement is verified, the app makes no ad requests. The app creates no account; core records and insights remain on the device.

Optional notification access

Notification access works only after the user accepts a separate in-app disclosure and enables access in Android settings. For allow-listed banks, carriers, stores and subscription services, the app may inspect the sending app, title, text, service, amount, currency and date on the device to identify subscription, bill, renewal and payment signals. Messaging, social-media, SMS and email notifications are discarded without being saved.

Full notification title and text may be processed in an encrypted temporary queue limited to 500 records and seven days, and are removed after successful processing. A persistent encrypted payment event may contain extracted fields plus a preview of up to 220 characters with email, IBAN, phone and card-like patterns redacted. Notification content is not sent to a developer server.

Manual subscription, bill and household records

A user may add a service or provider name, amount, currency, payment or due date, recurrence, category, note, payment state and optional account or household label. Bill cycles may retain due date, actual amount, open/paid/skipped state, paid date and notes. This information is processed on the device for upcoming-payment views, reminders, bill cycles, budgets and insights. The app is not a bank record, payment provider or financial-advice service.

Installed-app suggestions, catalogue and exchange rates

The app may locally check whether a limited, predefined set of known service packages is installed. It does not send a complete installed-app list to a developer server. The built-in catalogue works offline. If a service is not in the catalogue, the search text may be sent directly to Google Play's public search page only to suggest an app or game name; the request does not pass through a developer server.

To show local equivalents for foreign-currency amounts, the app may request the Central Bank of the Republic of Türkiye's public daily exchange-rate file directly about once every twenty hours. No personal financial record is sent with that request, although the bank may receive the normal IP address and request metadata.

Bill image and ML Kit

A user may select one bill or payment image through the system photo picker. Service name, amount and date are read on the device with Google ML Kit. The image and recognised text are not sent to a developer server or stored permanently by the app. Under its own terms, ML Kit may process technical app, device, usage, installation and diagnostic data for operation, security and performance.

Pro purchase

Pro purchase and restoration are handled through Google Play Billing. The app processes the product identifier, purchase state and purchase token to verify entitlement. The developer does not see or store card or bank account details.

Google Mobile Ads and privacy choices

The free Google Play version uses the Google Mobile Ads (AdMob) SDK to show a banner ad on Home and the Google User Messaging Platform (UMP) SDK to manage required privacy notices and choices. During an ad request, Google may automatically collect and share the IP address (which may be used to estimate general or approximate location), product interactions, diagnostic information, and device or account identifiers, including the Android advertising ID and App Set ID where available, for advertising or marketing, analytics, and fraud prevention, security, and compliance. Data is encrypted in transit using TLS.

The Google Play build does not read SMS or Gmail. The app does not add subscription or bill records, manual notes, notification titles or text, bill images, or OCR-recognised text to ad requests and does not send that content to AdMob for ad targeting.

Where applicable, a UMP privacy message is shown and the app requests ads only when the current consent state allows it. When required, users can change their choices from Ad privacy options in the Legal information screen. After Pro entitlement is verified, the app makes no ad requests; required privacy options remain accessible.

Storage, encryption, backups and export

Subscription and bill records, payment events created from matching notifications and sensitive preferences remain in Android Keystore-backed encrypted local storage until the user deletes them or uninstalls the app. Android system backup is disabled. Password-protected backups use AES-GCM.

If automatic backup is enabled, the app writes an encrypted backup immediately and approximately every 24 hours to the location or cloud provider chosen through the system file picker. The destination and password are stored encrypted on the device; the selected provider may process connection and file metadata under its own terms. The developer operates no backup server. CSV or JSON exports explicitly created by the user may be unencrypted, and the user is responsible for the chosen destination and file security.

Sharing, sale and user control

The developer does not collect raw notifications, bill images, recognised text, subscription or bill cards, or financial summaries on its own server; sell them; or use them for ad targeting, credit assessment or profiling. Google Mobile Ads may automatically collect and share the ad-related technical data described above. A user may disable notification access, delete individual records, history or all local data, and reopen ad privacy choices when UMP requires them. Uninstalling removes local app data.

Children and contact

Subscription Radar is not directed to children and does not target users under 18. If data practices change, this policy and the Google Play Data safety declaration will be updated. Contact ozkanaltnors@gmail.com for privacy, deletion, purchase or incorrect-detection requests.