Privacy Policy

Last updated 2 August 2026

Subception is a subscription tracker that runs entirely on your own devices. This page explains, in plain language, exactly what happens to your information — and the short answer is that almost nothing happens to it, because we never receive it.

The short version

• We collect nothing. No analytics, no advertising identifiers, no tracking, no crash-reporting SDK, no profiling.
• There is no account to create and no login. Nothing in the app is gated behind signing in.
• Your subscriptions live on your devices, and sync only through your own private iCloud.
• We operate no servers that hold your data. There is nothing of yours for us to lose, sell or hand over.
• The app makes exactly one kind of outbound request, and it is anonymous. It is described in full below.

Who we are

Subception is made by NetSmiths Ltd, a company registered in England and Wales. For the purposes of UK data-protection law, NetSmiths Ltd is the data controller for this website and for the Subception apps.

What we collect

Nothing. The subscriptions, prices, dates, categories, payment methods and notes you enter are written to a database inside the app's own container on your device. That data is never transmitted to us, and we have no facility to receive it.

The app's privacy manifest declares no collected data types and no tracking, and its App Store privacy label is "Data Not Collected". The only Apple "required reason" API it uses is UserDefaults, to store your own settings in the app's container and the App Group it shares with its widgets.

iCloud sync

If you turn on iCloud sync, Subception uses Apple's CloudKit private database to keep your subscriptions consistent across your iPhone, iPad and Mac. That data moves between your own devices through your own Apple Account. Apple acts as the processor for that sync; we are not a party to it and cannot read, browse or recover it. Apple's handling of it is governed by Apple's Privacy Policy.

If you never enable iCloud sync, your data never leaves the device you entered it on.

The one request the app makes

Subception supports subscriptions priced in currencies other than your own. To convert them it reads the European Central Bank's public daily reference-rate file:

That request is an ordinary anonymous HTTPS GET. It carries no API key, no account, no device identifier and no information about you or your subscriptions — it is the same request any web browser would make by visiting that address. What comes back is a public table of exchange rates. It is made at most once per calendar day, and is skipped entirely when you have nothing that needs converting. Your own manual rate overrides always take precedence, and converted figures in the app cite their source and date.

As with any HTTPS request, the European Central Bank's own web infrastructure will see the connection and the originating IP address, as it would for any visitor. We receive nothing from it.

Beyond this, and beyond Apple's own iCloud and App Store services, Subception makes no network requests at all. There are no third-party SDKs or frameworks in the app.

Purchases

Subception's optional one-time unlock is sold and processed by Apple through the App Store. We never see or receive your payment card details, billing address or Apple Account. The app determines whether you own the unlock by asking StoreKit on your own device; that check does not involve any server of ours.

Notifications, widgets and Shortcuts

Renewal reminders are scheduled locally on your device and delivered by iOS or macOS. Nothing is sent to a push server of ours — we do not run one. Widgets, Spotlight and Shortcuts read only your local data on the device they are running on.

Children

Subception is rated 4+ and is safe for all ages, but it is not directed at children and it collects no personal data from anyone, of any age.

Your rights under UK GDPR

If we held personal data about you, you would have the right to access it, correct it, erase it, restrict or object to its processing, and receive a portable copy. We want to be straightforward about how those rights apply here: we hold no personal data about you, so there is nothing for us to produce, correct or delete.

Your data is under your own control instead:

• Access and portability — export everything to CSV or JSON from inside the app, at any time. Export, import and backup are free forever and are never placed behind the paywall.
• Erasure — delete individual subscriptions in the app, or delete the app to remove its local data. To remove synced data, turn off iCloud for Subception and delete the app's data in your iCloud settings.

If you believe we have handled your data improperly, you may contact us at hi@netsmiths.com, and you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office — ico.org.uk.

This website

This site sets no cookies, runs no analytics and loads nothing from any third party. There is no consent banner because there is nothing to consent to. Its fonts are self-hosted for exactly this reason, and every page works with JavaScript disabled. Our hosting provider, Cloudflare, processes ordinary server request logs to deliver and protect the site.

Data sharing and transfers

We sell nothing, share nothing and transfer nothing, because we hold nothing. No advertiser, data broker or analytics provider receives anything from Subception.

Changes to this policy

If this policy changes, the "last updated" date above changes with it and the substantive change is described in the changelog. We will not quietly start collecting data — the whole product rests on not doing so.

Contact

Questions about privacy? Email hi@netsmiths.com and a person will reply.