Privacy Policy

Who We Are

Subzero ("freezeit.app") is a subscription tracking application developed and operated by the Subzero team.

If you have any questions about this policy, contact us at privacy@freezeit.app.

What Data We Collect

We collect only the minimum data necessary to provide our service:

• Email address — used for login via OTP (magic code). No password is stored.
• Subscription data — names, prices, billing dates, and categories you manually enter.
• Usage preferences — currency selection, notification preferences, stored locally on your device.

How We Use Your Data

Your data is used exclusively to provide the Subzero service:

• To authenticate you securely via email OTP
• To store and display your subscription list across devices
• To send payment reminder notifications (if enabled)
• To generate spending insights within the app

We never use your data for advertising, profiling, or any purpose beyond the core app functionality.

Data Storage & Security

Your subscription data is stored in Supabase (a secure PostgreSQL database with row-level security). Only you can access your data — it is protected by your authenticated session.

• Data is encrypted in transit (HTTPS/TLS)
• Data is encrypted at rest
• Row-level security ensures no user can access another user's data
• Login uses OTP — no passwords are stored

Third-Party Services

Subzero uses the following third-party services:

• Supabase — database and authentication (Privacy Policy)
• OpenAI — AI-powered cancel guides and Smart Scan analysis (Privacy Policy)
• Google Favicon API — to display subscription logos (no personal data sent)
• Resend — to deliver OTP login codes via email (Privacy Policy)

We do not use advertising networks, analytics trackers, or social media SDKs.

Smart Scan & AI Features

When you use Smart Scan, you upload a photo of a bank statement. This image is sent to OpenAI's API for analysis to detect subscription charges. The image is processed and immediately discarded — it is not stored by Subzero or OpenAI beyond the API request.

We recommend blurring or cropping sensitive information (account numbers, full name) before scanning.

Your Rights

You have full control over your data:

• Access — all your data is visible directly in the app
• Export — use the Export feature in Settings to download your data
• Delete — use "Delete Account" in Settings to permanently remove all your data
• Portability — your subscription data can be exported as plain text

If you are in the EU, you have rights under GDPR including the right to access, rectify, and erase your personal data.

Children's Privacy

Subzero is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.