Privacy Policy

Effective 15 October 2026 · Applies to the Ultra Subscription Tracker (“UST”) app on iOS, Android and the web

1. Who we are

UST is published by 24heights Services Limited, 12 Abraham Osar-Amadin Street / Youth Road, Obazuwa, Upper Ekenwan, Ovia North East, Benin City, Edo State, Nigeria (“we”, “us”). We are the data controller for the limited information described here. Contact us at support@ultrasubscriptiontracker.com.

2. Information you enter

Everything you enter into UST is stored in the app’s storage on your device:

• Subscription details: name, amount, currency, billing cycle and dates, category, notes, cancel links and any payment label you type (for example “GTB Visa •• 4417”).
• Payment history you record, your budget and your app settings.
• If you choose to add them, a display name and a profile photo. The photo is shrunk to a small image on your phone before it is saved.

Without an account, we do not receive, copy or back up this information.

With an account, a copy of this information is kept in your account and synced to every device where you sign in. Please don’t enter full card numbers, PINs or passwords; UST never asks for them.

3. Your account

Signing in is optional. When you sign in we collect:

• Your email address, to send you a one-time sign-in code and identify your account
• An account ID we generate, and the dates your account was created and last signed in
• Your synced tracker data described in section 2
• A list of the devices signed in to your account: a device identifier, the device type (for example “iPhone” or “Samsung SM-A546E”), and when each was last used. This enforces the 2-device limit and lets you remove devices you no longer use
• Technical data needed to keep you signed in securely: device and browser type, and IP address

Account data is stored by our hosting provider Supabase, Inc. (servers in Europe (London or Frankfurt)). It is protected by encryption in transit and at rest, and access rules that allow only your signed-in account to read or change your data. See Supabase’s privacy policy. We only send you emails needed for sign-in or important service notices; no marketing.

If you use Back up or Export to CSV, UST creates a file and hands it to you through your phone’s share sheet. Where that file goes (Files, email, cloud storage) is your choice, and it is then governed by that service’s privacy terms.

4. Reminders, alarms and exchange rates

Renewal reminders and alarms are scheduled locally by your device’s operating system (on iPhone, alarms use Apple’s AlarmKit and need your permission). No push server is involved and no reminder content is sent to us. You can turn reminders and alarms off at any time in your device settings.

If you turn on Show everything in your currency, the app downloads daily exchange rates from ExchangeRate-API (exchangerate-api.com). The request contains no personal data; like any web request, the provider can see your IP address.

5. Purchases of UST Pro

Pro is sold through the Apple App Store and Google Play. Apple or Google processes your payment; we never receive your card or bank details.

To confirm and restore Pro, we use RevenueCat, Inc. (USA) as our purchase-management provider. When you open the app, buy or restore Pro, RevenueCat receives:

• An app user ID: a random ID for this installation, or your UST account ID if you are signed in (not your name, email or phone number)
• Purchase and receipt information from Apple or Google (product, price, currency, dates, renewal status)
• Basic technical data: device type, operating system and app version, country of your store account, and IP address (used for connection and fraud prevention)

We use this only to unlock Pro, restore it on a new phone, handle refunds and understand overall sales. See RevenueCat’s privacy policy.

6. Ads in the free version

If you use UST without Pro, the app shows a small banner ad on some screens. Ads are served by Google AdMob (Google LLC / Google Ireland Ltd). Pro removes all ads. We never show ads on reminder or alarm screens.

We request non-personalised ads only: ads are not based on your interests or on your activity in other apps, and UST never asks iPhone users for permission to track. To show ads, prevent fraud and measure ad performance, Google’s SDK receives:

• Device identifiers, such as the Android advertising ID or Apple’s vendor identifier (used for frequency capping and fraud prevention, not for personalisation)
• IP address and approximate location derived from it, device type, operating system and app version
• Ad interactions, such as whether an ad was shown or tapped, and diagnostic information about the ad SDK

Google receives none of your subscriptions, email address or account data. See how Google uses information from apps that use its services. On Android you can reset or delete your advertising ID in your phone’s settings.

7. What we don’t do

• No personalised ads and no tracking across other apps or websites
• No analytics or crash-reporting SDKs
• No ads at all for Pro users
• No selling or renting of personal information
• No access to your bank, card, email inbox or subscription accounts

8. Summary of data

9. Legal bases

Where data-protection law requires a legal basis (including the Nigeria Data Protection Act 2023 and the EU/UK GDPR), we rely on performance of a contract to provide your account, sync and any Pro you bought, and our legitimate interests in preventing fraud, funding the free version with non-personalised ads, and keeping records required for tax and accounting.

10. Retention and deletion

Delete your account in the app under Settings → Account → Delete account, or follow the steps on our account deletion page if you no longer have the app. This permanently removes your email, account and all synced data from our systems immediately; encrypted provider backups are overwritten within 30 days. Signing out removes the data from that phone but keeps it in your account.

If you don’t use an account, deleting UST from your device, or using Settings → Erase all subscriptions, removes the data stored in the app. If an account is inactive for 3 years we may delete it after emailing you first.

Purchase records are kept by RevenueCat and the stores for as long as needed to provide Pro and meet legal obligations. To ask us to delete the purchase records linked to your app user ID, email support@ultrasubscriptiontracker.com.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict processing, and to withdraw consent. Nigerian residents may also complain to the Nigeria Data Protection Commission, and EU/UK residents to their local supervisory authority. Most of this you can do yourself in the app (view, edit, export and delete). For anything else, email us from the address on your account.

12. International transfers

RevenueCat and Google process data in the United States and other countries, and Supabase in the region named above. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

13. Children

UST is not directed at children under 13, and we do not knowingly collect information from them.

14. Security

Data in the app is protected by your device’s own security (passcode, encryption). Sign-in uses one-time codes, so there is no password to steal. All communication with Supabase, RevenueCat, Google and the stores uses encrypted connections.

15. Changes

If we change this policy we will update the date above, and for significant changes we will tell you in the app before they apply.

16. Contact

24heights Services Limited · 12 Abraham Osar-Amadin Street / Youth Road, Obazuwa, Upper Ekenwan, Ovia North East, Benin City, Edo State, Nigeria · support@ultrasubscriptiontracker.com