Privacy Policy

Recurrs ("Recurrs," "we," "our," or "us") is a subscription management application developed and operated by Varun Anand, an individual developer operating under the Figo brand. Our registered contact email is privacy@figo.app.

This Privacy Policy governs your use of the Recurrs iOS application and any related services, websites, or communications operated by us (collectively, the "Service"). By using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This Policy is written in plain English wherever possible. Where legal language is necessary, we explain what it means.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

• Device identifiers: iOS version and device type, used only for compatibility and crash diagnostics.
• Anonymous analytics: Which features are used (e.g., "AI Advisor opened"), aggregated and not linked to your identity. Collected via Google Analytics (gtag.js) on our website only — not in the app itself.
• APNs device token: Apple Push Notification token, collected when you grant notification permission and stored in our database to enable push notifications. This is a device identifier assigned by Apple, not your personal data.
• Currency exchange rates: Fetched from frankfurter.app. No personal data is sent.
• App version and build number: Sent with API requests for compatibility checking.

2.3 Information We Do Not Collect

We use the information we collect strictly to provide and improve the Service. We do not use your data for advertising.

4.1 What we access

• Only sender email addresses and email subject lines from your inbox — never email body content.
• We query Gmail's API with a filter for billing-related senders (e.g., "receipt," "invoice," "subscription") to minimise the scope of access.
• We only scan emails from the last 6 months.

4.2 What we store

• A Google OAuth refresh token is stored in our secure Supabase database, encrypted at rest, protected by Row Level Security. This token is used to perform automatic background scans without requiring you to re-authorise each time.
• The refresh token is stored server-side only. It never resides on your device. It is never returned to the app in any API response.
• Detected subscription names, amounts, and billing cycles are cached locally on your device only (UserDefaults). They are not uploaded to our servers.
• Email addresses or subjects that triggered a detection are not stored anywhere — only the derived subscription data (e.g., "Spotify — $9.99/month").

4.3 What happens when you disconnect

• Your refresh token is immediately deleted from our database.
• All locally cached Gmail suggestions are cleared from your device.
• Any subscriptions you previously added from Gmail suggestions remain in the app — deleting them is your choice.

4.4 Google's policies

Use of data obtained through Gmail is governed by our compliance with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for any purpose other than detecting subscription billing emails for display within Recurrs.

Your Gmail data is not used to serve advertisements, is not shared with third parties for their independent use, and is not used to train AI models.

When you use the AI Advisor or AI Assistant features (Pro only), the following data is sent to Google's Gemini API via our secure backend proxy hosted on Supabase:

• Subscription names, amounts, billing cycles, and usage ratings
• Aggregated spending totals

Google's processing of this data is governed by the Google Privacy Policy. AI-generated advice is for informational purposes only and does not constitute financial advice.

6.1 On-device storage

Your subscription data is stored locally using Apple's SwiftData framework with optional CloudKit synchronisation. Data stored via CloudKit is encrypted by Apple both in transit and at rest using AES-256 encryption. This data is accessible only through your Apple ID.

6.2 Cloud storage (Supabase)

For cloud sync (Pro feature) and account management, we use Supabase, a PostgreSQL-based cloud database hosted on AWS infrastructure in the United States. All data is:

• Encrypted in transit using TLS 1.2 or higher (HTTPS for all connections)
• Encrypted at rest using AES-256
• Protected by Row Level Security (RLS) — database-level policies that ensure each user can only read and write their own data. Even in the event of a database compromise, RLS prevents cross-user data access.

6.3 Network security

• All network communication uses HTTPS. The app enforces Apple's App Transport Security (ATS) — plaintext HTTP connections are blocked at the OS level.
• Google OAuth uses PKCE (Proof Key for Code Exchange) — a security extension that prevents authorisation code interception attacks.
• Our Supabase anon key is embedded in the app as designed by Supabase — it is a public key that grants access only within the boundaries of our RLS policies. Your data cannot be accessed with this key alone; a valid authenticated session JWT is required.

6.4 What we cannot guarantee

We do not use any advertising networks, tracking SDKs, or analytics frameworks inside the iOS app itself.

We may share your information only in the following limited circumstances:

• Service providers: The third parties listed in Section 7, solely for the purposes described.
• Legal compliance: If required by applicable law, court order, or governmental authority, we may disclose information to comply with such legal requirements.
• Protection of rights: To protect the rights, property, or safety of Recurrs, our users, or the public, where disclosure is necessary.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
• With your explicit consent: For any other purpose, only with your prior written consent.

Recurrs supports three sign-in methods:

• Email + Password: Passwords are hashed using bcrypt before storage. We never store or transmit plaintext passwords. Password hashing and verification is handled by Supabase Auth.
• Sign in with Google: We receive only your name and email address from Google. We do not receive your Google password.
• Sign in with Apple: We receive only your name and email address (or relay address). We do not receive your Apple ID password.

Authentication sessions use JWT (JSON Web Tokens) which are stored in the app's sandboxed storage and expire automatically. All authentication API calls are made over HTTPS.

All in-app purchases for Recurrs Pro are processed exclusively by Apple through the App Store. We never receive, process, or store your payment card numbers, bank account details, or any other financial credentials.

Apple acts as the merchant of record. Your payment data is subject to Apple's Privacy Policy. For refund requests, visit reportaproblem.apple.com.

We receive from Apple only a cryptographic receipt confirming whether a valid Pro subscription is active. This receipt does not contain your payment information.

• Active account: We retain your data for as long as your account is active and the Service is in use.
• Account deletion: When you delete your account through the app, all your personal data is permanently deleted from our Supabase database within 30 days. Subscription data on your device is deleted immediately when you delete the app.
• Gmail refresh token: Deleted immediately upon disconnecting Gmail in Settings, or upon account deletion.
• APNs push tokens: Deleted upon account deletion or when you revoke notification permissions.
• Backup data: We do not maintain separate backups of user data beyond what Supabase retains for disaster recovery (retained for up to 7 days in rolling backups, not individually restorable by users).
• Analytics data: Anonymised website analytics are retained per Google Analytics' standard retention settings (up to 14 months).

To request deletion of your data, use the account deletion option in the app (Settings → Account → Delete Account) or email privacy@figo.app.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

We will respond to verifiable requests within 30 days. In complex cases, we may extend this period by a further 60 days with notice.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. We honour these rights for all users regardless of location.

If you believe a child has provided us with personal information, please contact us immediately at privacy@figo.app. We will delete such information promptly upon verification.

Parents or guardians who have concerns about their child's use of the Service should contact us at the email address above.

Recurrs is operated from India. Our cloud infrastructure (Supabase) is hosted in the United States. If you are accessing the Service from outside India or the United States, be aware that your information may be transferred to, stored, and processed in the United States and India.

By using the Service, you consent to the transfer of your information to these countries, which may have data protection laws different from your country. We take appropriate safeguards to ensure your data remains protected regardless of where it is processed.

For users in the EEA or UK: We rely on your consent (for optional features) and contract performance as the legal basis for processing your data. Transfers to the US are made to Supabase, which operates under the EU-US Data Privacy Framework.

Recurrs uses local notifications (processed entirely on your device) and, for some features, remote push notifications via Apple Push Notification Service (APNs).

• Renewal reminders are local notifications — processed on-device, no data leaves your device.
• Usage check-in notifications are local notifications.
• Your APNs device token is stored in our database only to enable push delivery. It is not used for tracking or advertising.

You can revoke notification permissions at any time through iOS Settings → Notifications → Recurrs.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes by:

• Posting the updated policy at figoapp.net/recurr/privacypol.html
• Displaying an in-app notification for significant changes
• Updating the "Last updated" date at the top of this policy

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with a change, you must stop using the Service and delete your account.

For changes that materially affect how we use your Gmail data, we will require you to reconnect Gmail explicitly and re-grant consent.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Privacy enquiries: privacy@figo.app
• General support: support@figoapp.net
• Website: figoapp.net

We aim to respond to all privacy-related enquiries within 5 business days.