DueOrbit is provided by Mihail Duchev. This policy explains how information is handled when you use the app and this website. Contact support@dueorbit.app with privacy questions.
The information you enter
DueOrbit stores subscription names, amounts, currencies, billing dates, notes, categories, tags, payment labels, optional icon images you choose, and related preferences on your device. An icon image is chosen through the system photo picker, which shares only the selected image with the app and does not give DueOrbit access to the rest of your photo library. Payment labels are text you enter; DueOrbit does not connect to your bank or retrieve your full card details. Avoid putting passwords, full payment-card numbers, or other unnecessary sensitive information in notes or labels.
When you paste receipt text into the import tool, the app processes it on your device to suggest a subscription. This feature does not give DueOrbit access to your email inbox. Your clipboard is not continuously monitored.
Depending on your app version and platform, you may also enter custom billing schedules, dated prices, confirmed payments and refunds, cancellation dates and notes, reusable account labels, workspaces, usage check-ins, and a payer name or your share of a bill. These are tracking records you enter, not data retrieved from a bank or monitoring of other apps. Local cost splits do not invite or notify another person.
If you choose a receipt screenshot or PDF, its text is recognized on your device for you to review. The source document and extracted receipt text are not attached to a saved subscription; only the fields you confirm are saved. Android may create a temporary local PDF cache while scanning and removes it after processing. Receipt import does not connect to your inbox or automatically upload documents.
Optional cloud and companion features
On Apple devices, subscription records, including any icon images you choose, may sync through your private iCloud storage when available. Apple manages your iCloud account and the underlying cloud service. DueOrbit does not create a separate account or operate a subscription-record server.
On Android, optional Google sign-in provides account information such as your name, email address, and account identifier for the sign-in experience. If you enable Drive sync, subscription records, any icon images you choose, and deletion markers are transferred over HTTPS to a hidden folder reserved for DueOrbit in that Google account's Drive. This permission does not grant access to the rest of your Drive files. Google handles the identity and storage services. Signing out disconnects the app but does not itself erase the Drive copy.
Phone apps send a compact subscription snapshot to their paired watch using Apple's or Google's companion services. Widgets, tiles, and complications use local or last-received records. A device's own backup or transfer service may also retain app data under your device settings. Your preferences are not a promise of a complete cross-device backup.
Purchases
Apple or Google processes Premium purchases and payment details. DueOrbit reads store-provided purchase and entitlement information to unlock Premium and restore access. We do not receive your full payment-card number. The store may retain transaction records under its own policies. Deleting app data does not cancel a paid subscription.
Permissions and exports
Notifications are used for renewal and trial reminders. Calendar access lets DueOrbit create and maintain renewal events in a dedicated calendar; events may then be visible to other apps or accounts that have access to that calendar. Biometric or device-credential authentication is handled by your operating system; DueOrbit does not receive biometric templates.
CSV and JSON exports contain the records you choose to export. Files and information you share with another app, mail recipient, or storage service are handled by that destination. DueOrbit cannot remove copies you saved or sent elsewhere.
Exchange rates and external links
The app requests currency conversion rates from ExchangeRate-API using a fixed USD-based request. It does not send your chosen display currency or subscription list. The provider receives normal connection information, including your IP address, and uses IP-based rate limits to protect the service from excessive requests and abuse. See the provider's open-access documentation and terms and privacy information. Rates are estimates for comparison, not a bank or card-provider quote.
Opening a provider's cancellation page or another external link sends you to that provider, whose privacy practices apply.
Diagnostics, advertising, and this website
On Android, optional receipt scanning uses Google ML Kit through Google Play services. The recognition model may need to download before the first scan. Images and recognized text are processed on your device and are not sent to Google for recognition. Google may receive device and app information, device or installation identifiers, API configuration, input/output sizes, timing, and feature/error events to operate, diagnose and improve ML Kit. See Google's ML Kit privacy information and SDK data disclosure. Feature availability varies by version and platform.
The Android app uses Google services for sign-in, purchases, and phone/watch communication. Those services can process technical information about API requests, errors, service connections, and device/app configuration to operate and improve those services. DueOrbit does not include Firebase Analytics or Crashlytics. Google handles its service data under its own privacy policy.
DueOrbit does not display third-party advertisements, sell personal information, or use your subscription records for advertising.
This website does not load advertising scripts, analytics scripts, external fonts, or nonessential cookies. Cloudflare hosts the website and may process ordinary connection and security logs, including IP addresses, under its privacy policy. Cloudflare Email Routing forwards messages sent to support@dueorbit.app to our support inbox; Cloudflare and our email providers process those messages to deliver and answer your request.
Retention and deletion
On-device records remain until you delete them or remove the app's storage, subject to device backups. Cloud copies may remain until deleted through the app or the relevant cloud controls. Drive sync uses deletion markers to prevent older records from returning; these markers may remain for up to 90 days. Export files, calendar copies, device backups, and store transaction records have separate lifecycles.
Follow the deletion instructions to remove local and cloud copies and revoke Google access. We do not have a customer-record dashboard through which support can erase your private iCloud or Drive files. We can guide you through the provider controls. Support correspondence is kept as needed to handle the request, resolve disputes, and meet applicable recordkeeping requirements, then deleted or anonymized.
Your choices and rights
You can use core tracking offline, decline optional permissions, disconnect optional Google access, export your records, and request help with access, correction, or deletion. Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, or complain to a data protection authority. Contact us to exercise applicable rights; we may need proportionate information to verify a request. Withdrawing consent does not affect prior lawful processing.
Where data-protection law requires a legal basis, we process information to provide features you request, with consent where required for optional processing, for legitimate interests such as answering support and protecting the service, or to comply with legal obligations. Apple, Google, our hosting provider, and email providers may process information in other countries under their applicable safeguards and terms.
Children and changes
DueOrbit is intended for a general audience managing recurring expenses and is not designed specifically for children. If you believe a child has sent us personal information without appropriate authorization, contact us so we can address it.
We update the effective date when this policy changes and provide additional notice when required. The contact above is available for questions about this policy.
Expanded planning and preference sync
Newer builds with expanded sync also transfer global and category budgets, savings notes, payment-label and custom-category lists, workspaces, saved filters and views, scenarios, dashboard presets, export templates, and supported appearance, layout, sorting and display-currency preferences. Apple uses private iCloud storage, including key-value storage for these settings; Android uses the same private Drive app-data permission as subscription sync. The publisher does not receive this content.
Subscription-specific renewal and reminder rules remain part of the subscription records already synchronized. Global notification switches, delivery times, digest and report-notification schedules, generated report files, device permissions, calendar setup, app-lock choices, onboarding, credentials and purchase state stay local. Sync is not a complete device backup. These descriptions apply only to installed builds that offer expanded sync and do not announce a public release.