Privacy Policy

The app collects nothing. RenewAja does not operate a server, does not require an account and does not transmit the information you enter anywhere. Nothing you type into the app reaches us, and installing it tells us nothing about you.

There is one exception, and it lives outside the app: if you hand us your email address through the beta sign-up form on this website, we hold that address. Section 10 covers it. Nobody who simply installs RenewAja is in that list.

The only data that leaves your device is the traffic Google AdMob generates to request and measure ads, described in section 3. That traffic contains no subscription, payment or personal information from the app.

The following is written to a local database in the app's private storage area, readable only by the app:

• Subscriptions — service name, amount, currency, billing cycle, renewal date, category, notes and trial details.
• Shared plans — the names you type for the people you split with, their agreed share amounts, and whether each has settled. These are free-text labels you choose; the app does not read your contacts.
• Renewal history — a snapshot of each past billing cycle, so a later price change cannot rewrite what you already paid.
• Settings — reminder timing, default currency, app-lock preference and similar choices.

None of it is encrypted or transmitted by us to any third party, because none of it is transmitted at all. It is protected by the operating system's app sandbox and by whatever device encryption Android applies to your phone's storage.

RenewAja is free and is supported by ads served through Google AdMob on Android. AdMob is a third party and processes data under its own policy, not ours.

• What AdMob may receive: your device's advertising identifier, IP address, device and operating system details, coarse location derived from the IP address, and interactions with the ads themselves.
• What AdMob never receives: anything you entered in the app. Subscription names, amounts, dates, notes, the names of people you split with and your renewal history are never passed to the ad SDK.
• Consent: where the EU/UK rules apply, a consent form from Google's User Messaging Platform is shown before the first ad request. Outside those regions no form is shown because the requirement does not apply.
• Personalised ads: where consent was required, a "Privacy options" entry appears in the app's Settings so you can change or withdraw your choice at any time. Regardless of region, you can reset or delete your advertising ID from Android's own settings.

Google's handling of this data is described in its Privacy & Terms and its AdMob policies.

Backups are manual and local. When you export, the app writes a plain JSON file to a location you choose. There is no automatic upload and no backup service on our side.

Once that file exists, it is an ordinary document under your control: it is not encrypted, so anyone who can read the file can read your subscription list. If you move it to a cloud drive, a chat app or an email, it is covered by that service's privacy policy rather than this one.

Restoring always shows a preview with real counts — including how many existing records a replace would delete — before anything is written, because a restore cannot be undone.

An optional app lock accepts your fingerprint, face or device passcode. The passcode is deliberately allowed as well as biometrics so that a failed or unavailable sensor can never lock you out of your own records.

Beyond that, your data is protected by the same mechanisms as every other app on your phone: the Android application sandbox and the device's own storage encryption. Keeping your device updated and screen-locked is the most effective thing you can do for it.

No system is perfect, and a device that is rooted, compromised or shared with others offers weaker guarantees than one that is not.

Your data stays on your device for exactly as long as you keep it there. You can delete any subscription from within the app, and uninstalling RenewAja removes the entire local database along with it.

Because nothing is uploaded, there is no server-side copy to expire, anonymise or request the deletion of. Backup files you exported yourself are unaffected by an uninstall — delete those separately if you want them gone.

Privacy laws such as the GDPR and Indonesia's PDP Law give you rights of access, correction, deletion and portability over personal data a company holds about you.

In RenewAja those rights are satisfied directly by the app rather than by a request to us: access and correction happen by opening and editing your own records, portability by exporting the JSON backup, and erasure by deleting records or uninstalling. We hold nothing about you, so there is nothing for us to disclose or erase on request.

For the advertising data described in section 3, the controller is Google, and you can exercise your rights through the consent option in Settings and through Google's own privacy tools.

RenewAja is intended for general audiences and is not directed at children under 13. We knowingly collect no personal information from anyone, children included.

This section covers the sign-up form on the RenewAja website only. It has nothing to do with the app: you can install and use RenewAja without ever giving us an address.

• What we ask for: the Google account email you use on your Android device, and optionally your phone's brand and model.
• Why: Google Play can only invite a tester by Google account. The device model tells us which manufacturers the beta covers, because scheduled reminders behave differently on each one.
• Where it goes: straight into a Google Sheet in the developer's own Google account. Google processes it as our provider, under its own privacy policy. From there the address is added to the closed testing track in Google Play Console. It is stored nowhere else and passes through no other service.
• What we do with it: email you the Play opt-in link, and reply if you write to us about a bug. Nothing else. No newsletter, no marketing, and it is never sold or passed to a third party beyond Google Play itself.
• How long we keep it: until the closed beta ends, after which the sheet is deleted. Ask sooner and we will remove you at once.
• Getting out: email [email protected] and your address is deleted from the sheet and the test track. You can also leave the programme yourself from the Play opt-in page.

If the app ever starts handling data differently — a new SDK, an optional sync service, anything that changes what leaves your device — this policy will be updated and the date at the top will change. Material changes will also be noted in the Play Store release notes.

Questions about this policy, or about how RenewAja handles anything at all:

[email protected]