Privacy Policy

Last updated: March 28, 2026

Your privacy matters. We collect only what's necessary to provide our services and never sell your personal data.

This Privacy Policy applies to tinykit.io (the "Website") and the Subscription Trackermobile application (the "App"), collectively referred to as the "Services", operated by tinykit ("we", "us", or "our").

1. Information We Collect

Account Information

When you create an account, we collect your name and email address to authenticate and identify you across our Services.

Subscription Data (App)

The Subscription Tracker app allows you to log your subscriptions. This includes subscription names, amounts, billing cycles, categories, dates, and optional notes. This data is provided entirely by you and stored to power the app's features.

Usage & Analytics Data

We use Firebase Analytics to understand how the App is used. This includes events such as sign-ins, subscription actions (create, update, delete), and screen views. Analytics data is collected in aggregate and is not used to personally identify you. Analytics collection is disabled in development builds.

Crash Reports

We use Firebase Crashlytics to collect crash logs and error reports. These may include your user ID and email to help us diagnose issues specific to your account. Crash reporting is disabled in development builds.

Push Notification Tokens

If you opt in to push notifications, we collect your Firebase Cloud Messaging (FCM) token to send you billing reminders and other relevant notifications.

Files Processed on the Website

Some tools on tinykit.io allow you to upload and process files (e.g., PDF conversion). These files are processed entirely in your browser and are never uploaded to our servers.

2. How We Use Your Information

  • To provide, maintain, and improve our Services
  • To authenticate your identity and manage your account
  • To sync your subscription data across devices
  • To send push notifications (with your permission)
  • To monitor app stability and fix crashes
  • To understand usage patterns and improve the user experience

3. Data Storage & Security

Your account credentials and session tokens are stored securely using encrypted device storage (Expo SecureStore). Subscription data is stored on our servers when you are signed in, or locally on your device using SQLite when using guest mode.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

4. Guest Mode

You can use the Subscription Tracker app without creating an account. In guest mode, all data is stored locally on your device and is not transmitted to our servers. If you later create an account, your local data will be migrated to your account.

5. Third-Party Services

Our Services use the following third-party services that may collect data in accordance with their own privacy policies:

  • Firebase Analytics — usage analytics
  • Firebase Crashlytics — crash reporting
  • Firebase Cloud Messaging — push notifications
  • Google Tag Manager — website analytics

You can learn more about how Google handles data at Google's Privacy Policy.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following circumstances:

  • With service providers who assist in operating our Services (e.g., hosting, analytics)
  • When required by law or to respond to legal process
  • To protect the rights, safety, or property of tinykit, our users, or the public

7. Data Retention

We retain your account and subscription data for as long as your account is active. Session tokens expire after 7 days of inactivity. If you delete your account, your data will be permanently removed from our servers.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Opt out of push notifications at any time through your device settings
  • Use the App in guest mode without providing any personal information

9. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our Services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

[email protected]