Privacy Policy

This policy covers Aurabill: Subscription Tracker for iPhone and aurabill.app. It explains what is processed on your device, what reaches our service providers, and what we receive when you contact us.

The short version

Who is responsible

Acom Digital GmbH is the developer of Aurabill and the controller responsible for the processing described in this policy.

Mannenriedstrasse 22
3074 Muri b. Bern
Switzerland

UID: CHE-293.227.265
Commercial register: CH-036.4.071.075-6, Canton Bern.
Swiss commercial register entry

For privacy questions and requests, email hello@aurabill.app or write to the address above.

Scope of this policy

This policy describes the current app, including screenshot and bank statement import, usage analytics, shared content downloads, Aurabill Plus purchases and local reminders. Product availability and purchase options depend on the version and App Store offering you use. The app does not currently include an in-app feedback composer; support and guide requests are handled by email.

What the app stores, and where

• Subscription records: names, notes, prices, currencies, billing and trial dates, categories, payment channels, cancellation links, reminder choices, cancellation history, savings estimates and price history (the price, billing cycle and currency changes you record, trial conversions, and notices about price changes published in Aurabill’s catalog).
• Import drafts: details extracted from selected screenshots or PDF statements, such as merchant or plan text, amounts and dates, together with your edits and selections. A draft is saved locally before you confirm an import so you can return to it.
• App state: settings, guide progress, local record identifiers, notification preferences, purchase entitlements and information needed to resume a pending purchase or action.
• Widget snapshot: upcoming charges with their service names, amounts and dates, your monthly and yearly totals and copies of downloaded logos, which the app keeps in its App Group container for the optional Home Screen widget. With Aurabill Plus, the widget shows your next charge’s service name, amount and date where iOS displays it, such as the Home Screen and StandBy; its medium size also shows your monthly and yearly totals.
• Shared reference content: the downloaded catalog, guides, parser dictionaries, exchange rates and service logos, plus their versions and update status.

Personal records and preferences are stored in the app’s local storage, including its App Group container. Shared content has a separate local cache. The content service does not receive your subscription database or import drafts. Names and notes can contain personal information you enter; Aurabill does not require your real name, bank credentials or contact details to track subscriptions.

Retention and deletion on your device. Subscription records remain until you delete them. Closing an import review keeps its draft; completing, discarding or replacing the import removes or replaces that draft. There is no automatic time limit for unfinished drafts. Guide progress and settings remain until reset or the relevant app data is removed. You can delete individual subscriptions in the app. Removing the app normally removes its local data, but does not delete original screenshots, existing backups, Apple purchase records or correspondence you sent us.

Device backups

Aurabill does not provide its own cloud sync for subscription records. Depending on your device and backup settings, local app data may be included in iCloud or computer backups. These copies are controlled through your Apple Account and backup tools; we cannot access them. A backup may retain data after you delete it from the app. Original screenshots in Photos have their own storage, backup and iCloud Photos settings.

No Aurabill account or bank login

You do not register or sign in to Aurabill. The app does not connect to your bank or automatically retrieve your subscription history from Apple. Local record identifiers and purchase-related identifiers help the app keep records and actions consistent; they do not create an Aurabill account. Your Apple Account remains separate and is used by Apple for App Store purchases and related services.

Analytics, advertising and tracking

We use TelemetryDeck to understand which features people use and where flows succeed or fail. Events measure onboarding start and completion, notification-permission outcomes, subscription and trial additions, import outcomes, guide openings, cancellation confirmations, paywall views and completed Aurabill Plus purchases. Custom fields contain categories such as custom/import/catalog, success/partial/failed, an import count range, guide route, paywall trigger or Plus plan.

TelemetryDeck events do not contain subscription names or service identifiers, amounts, billing dates, notes, screenshots, recognized text, email addresses, bank details or purchase transaction identifiers. TelemetryDeck uses a hash of the iOS vendor identifier and a session identifier; we do not supply an account identifier. The SDK also includes app version, build, operating-system and device information, language/region and other default metadata described in its parameter reference. Automatic session events are disabled, but the SDK still attaches coarse usage counters, such as days used, session counts and session lengths, to each event.

TelemetryDeck states that it does not store IP addresses and currently sets no fixed deletion schedule for analytics events in cold storage. Removing Aurabill does not delete events already submitted. Its privacy FAQ and privacy policy explain its handling of identifiers, hosting and retention.

The app includes no advertising, attribution or third-party crash-reporting SDK. We do not track you across apps or websites, sell personal information, or share it for cross-context behavioral advertising. Catalog search and matching run locally, and so does the comparison of your subscriptions with price changes published in the catalog. Service logos are downloaded from our Cloudflare content service as they appear; the app does not request artwork from brand websites or logo providers.

Shared content downloads

Aurabill downloads a shared manifest, complete content snapshots, separate exchange-rate files and individual service logos from our Cloudflare content service. The files are shared across users. Logos are requested when their avatars appear, including in catalog search, import reviews and your subscription views. Each logo URL identifies the public catalog service whose artwork is requested, so the host can see that brand was displayed; this does not establish that you subscribe to it. Requests do not contain your subscription records, screenshots, recognized text or an Aurabill user identifier. The app does not attach cookies or stored login credentials to these requests.

Cloudflare receives information needed to handle the connection, which can include an IP address, requested URL, request time and device or client information. It may process traffic and security metadata to deliver and protect the service. The content service has no database of user subscriptions; its storage contains public reference content. We have not configured request-log exports for the content Worker. Cloudflare may still retain operational or security information.

The app normally checks content and rates for updates at most daily: when you use it, and sometimes in the background when iOS allows it. You can also request a refresh. A background check uses the same requests as one made while you use the app, and sends no analytics. It keeps the last valid download if an update fails. Catalog search, guides, screenshot and statement parsing and exchange-rate conversions need an initial download. Manual tracking works without one; downloaded content remains usable offline. Content and rate updates are independent. Logos have individual caches and are rechecked as needed when displayed; downloading content does not download all logos. Cached artwork works offline, and monograms appear while artwork is unavailable.

Cloudflare’s privacy policy explains its data handling and retention criteria. Information about international processing appears under Service providers and international processing.

Screenshot import

You can select screenshots of your Apple subscriptions list, bank transactions or a service’s billing page. The Apple-list flow opens your Apple subscriptions (App Store) so you can take screenshots yourself. The system photo picker gives Aurabill access only to the images you select, up to ten at a time; the app does not request permission to browse your whole photo library.

Apple’s Vision framework recognizes text on your device. Aurabill processes image bytes and full recognized text in memory and does not intentionally save an extra screenshot file or upload either to the content service. The image already in Photos is unaffected. iOS may manage its own temporary files when supplying an image.

Extracted draft details are saved locally before confirmation. These are the review fields described above, not a stored copy of the screenshot. Review them before importing and discard a draft you do not want to keep. The app tries to filter payment-card and account information from supported imports, but you should still avoid selecting or sending screenshots containing information you do not need to track.

Bank statement import

With Aurabill Plus you can import PDF statements from your bank or card, up to six at a time, picked in the Files app. The system file picker gives Aurabill access only to the files you pick. Aurabill reads them on your device: Apple’s PDFKit reads each page’s text, and Apple’s Vision framework recognizes the text of a scanned page. The file bytes are held in memory while the statement is read, and are not saved by Aurabill or uploaded to the content service. The file in Files is unaffected.

You can also open a PDF statement in Aurabill from another app. iOS then gives Aurabill a copy of the file; Aurabill reads it into memory and deletes that copy straight away.

A statement protected by a password asks for it. The password is used once to open that file and is not saved.

Extracted draft details are saved locally before confirmation, as for screenshots: the review fields described above and up to twelve recent charges per merchant, not a copy of the statement. The app tries to drop card numbers, account numbers and other account information before any charge is grouped, but you should still review the draft and discard one you do not want to keep.

Notifications

Renewal reminders, trial reminders, Aurabill Plus price-change alerts and an optional refund follow-up are scheduled locally with iOS. A price-change alert is scheduled on your device when a content check finds a published price change for a service you track. Aurabill has no push-notification server and does not register a remote push token. Local reminders do not need a live connection when they are delivered, but permission, device settings and iOS behavior affect whether and when you see them.

Notifications may display a service name, amount, date, announced price change or refund reminder on the lock screen. You control previews and notification permission in iOS settings. Tracking subscriptions remains available if you turn notifications off.

Purchases

Apple processes Aurabill Plus purchases through the App Store. The app uses StoreKit to verify purchase entitlements and restore access. It can read purchase and transaction identifiers, product information, expiration or revocation information and whether access is family-shared. It stores entitlement and pending-action information locally.

For some purchase flows, the app sends Apple a randomly generated identifier to associate a pending purchase approval with the action you started. This is not your name, email address or an Aurabill account, and it is not sent to the content host. The app does not send your tracked subscription list to Apple as part of that purchase request.

We do not receive your payment-card details or Apple Account password. Apple supplies developers with sales, financial and related reports under its own terms. Apple also manages any eligible Family Sharing access; Aurabill does not obtain the identities of other family members from StoreKit.

RevenueCat purchase reporting. When enabled in the app version you use, RevenueCat processes an anonymous customer identifier, transaction or receipt information, product identifiers, prices, currencies, purchase and expiry dates, and purchase status for Aurabill Plus. This supports purchase validation and reports about purchases, renewals, refunds and expired paid subscriptions. RevenueCat also receives ordinary app/device and connection information needed to provide its service. Your personal list of tracked subscriptions, notes, screenshots and recognized text are not sent to RevenueCat.

We do not supply RevenueCat with your name, email or other custom customer details, and we do not link its customer identifier to TelemetryDeck. Automatic advertising/device-identifier collection and optional diagnostics are disabled. Test versions may send simulated purchase information to RevenueCat. App Store purchase reporting is still being configured; it applies only in versions where enabled. Removing the app does not by itself delete purchase records already held by Apple or RevenueCat. See RevenueCat’s privacy information for its processing practices.

Support, guide requests and launch email

When you email hello@aurabill.app, we receive your sender address, message, attachments and ordinary email metadata. We use this information to answer you, investigate the issue you report and maintain the service. Please avoid sending full bank statements, payment-card details, account credentials or screenshots containing unrelated personal information.

The domain uses Cloudflare Email Routing to forward incoming mail to a Google-hosted support mailbox. These providers process your address, message and routing information to deliver, secure and store the correspondence. We do not publish your messages or add ordinary support correspondents to a marketing list. If you expressly request a launch notification, we use your address for that requested update; you can withdraw that request by emailing us.

We keep correspondence for the time needed to resolve the request, handle related follow-up or disputes and meet applicable recordkeeping duties. We delete or anonymize it when those purposes no longer require identifiable correspondence. We retain a launch-notification request until the requested update is sent or you withdraw it, subject to any applicable legal recordkeeping requirement. Provider backups and security records follow the relevant provider’s retention practices.

Links and services you open

One tap to your Apple subscriptions list opens Apple’s subscription-management interface; you then choose the service there. Cancellation and guide links may open a service’s website, support page or a phone call. Refund assistance may open Apple’s refund website. A link can identify the service you chose to the receiving company, and a custom link can contain parameters you entered.

When you open a web page, its operator receives normal connection information and may set its own cookies or ask you to sign in. Its privacy policy applies. Aurabill does not read the page, your passwords or what you type in the Safari view. Opening a link does not cancel a subscription or submit a refund request; those steps are under your control.

Apple services and diagnostics

Apple separately processes App Store downloads, payments, backups and any diagnostics you choose to share. Developer-accessible diagnostics may contain technical details about a device or crash. Aurabill also records limited system diagnostics for failures; it does not intentionally log your screenshots, full recognized text or subscription records. We do not operate a separate service that collects these logs automatically.

See Apple’s privacy policy for Apple’s practices and use your Apple settings to manage available backup and diagnostic-sharing choices.

Children

Aurabill is intended for people managing their own subscriptions and is not directed at children. It has no social profiles, messaging or advertising. If you believe a child has sent us personal information by email, contact us so we can assess the request and delete information where appropriate.

This website

Cloudflare Pages hosts this website. The pages use local assets and contain no advertising tags, analytics scripts, contact forms or account login. Our page code does not set cookies or use browser storage. Contact links open your email application. Cloudflare provides network delivery and security for the domain; security features provided by the delivery service may use cookies or process request information independently of our page code.

The Blog’s cancellation guides are assembled on Cloudflare’s servers, when you request them, from the same shared content service that the app uses, so they normally show the guides currently published there. Your browser does not contact that service for them, and our server code does not send it information about your visit. These pages add no cookies, executable scripts or browser storage.

Serving a page can expose your IP address, requested page, request time, browser information and referrer information to the providers involved. Cloudflare may also ask your browser to send network-error reports containing request and connection diagnostics. This information is used for delivery, troubleshooting and security. We do not use it to build advertising profiles or connect website visits to your locally stored subscriptions.

Service providers and international processing

Acom Digital GmbH is established in Switzerland. Cloudflare, Inc. is based in the United States and operates internationally. Cloudflare states that it primarily stores information in the United States and the European Economic Area and may transfer or access it in other countries where it operates. Its policy describes reliance on the EU–US and Swiss–US Data Privacy Frameworks, the UK extension, and standard contractual clauses where applicable. See Cloudflare’s international-transfer disclosures.

Google provides the receiving email service. Google operates internationally, including in the United States, and processing locations can depend on the service and account settings. Its privacy information and data-transfer framework disclosures describe applicable protections, including Data Privacy Framework certifications and contractual safeguards.

TelemetryDeck GmbH is based in Germany. Its hosting disclosure identifies analytics servers in Germany and the Netherlands. Its analytics retention is described above.

RevenueCat, Inc. is based in the United States. Its privacy policy describes storage on Amazon Web Services in the United States, international processing and contractual protections. Purchase reporting through RevenueCat applies when enabled as described above.

Cloudflare and Google describe provider retention using the purposes of processing, service settings, security needs and legal obligations. Their connection logs and backups may remain after a request is completed or correspondence is deleted. Our own correspondence-retention criteria are described under Support, guide requests and launch email.

Processing by Apple, your backup service and websites you choose to open is governed by their respective privacy terms. We may also disclose information we hold where necessary to meet a legal obligation, respond to a lawful request or establish, exercise or defend legal claims.

Swiss, EEA and UK privacy rights

Depending on the law that applies to you and the processing involved, you may request access to personal data, correction, deletion, restriction, portability or information about disclosures, and you may object to processing. If processing relies on consent, you can withdraw it for the future. You can contact us at hello@aurabill.app.

For processing subject to the EU or UK GDPR, we rely on the following bases as applicable:

Your right to object. Where we rely on legitimate interests, including for usage analytics and purchase reporting, you can object to that processing at any time on grounds relating to your particular situation (Article 21). Email hello@aurabill.app or write to the address under Who is responsible.

We cannot retrieve subscription records that exist only on your device. We may need proportionate information to verify a request or locate correspondence, and will not collect extra identifiers solely to identify visitors in logs. We respond within the period required by applicable law and explain any applicable exception or extension.

You may complain to the Swiss Federal Data Protection and Information Commissioner or another competent supervisory authority, including one in the EEA or UK where applicable. We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.

US state privacy rights

Where an applicable US state privacy law, including the California CCPA/CPRA, gives you rights regarding information we process, you may ask to access, correct or delete it and exercise other applicable rights. We do not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising a privacy right.

The relevant categories are contact information and correspondence you send, purchase-related information handled through Apple and RevenueCat when enabled, usage events and Plus plan categories sent to TelemetryDeck, and identifiers, connection or device information involved in analytics and hosting. Their sources, purposes, recipients and retention are described above. Information you voluntarily include in an email may contain additional categories. Contact hello@aurabill.app to make a request or submit an authorized-agent request; we may need information to verify authority.

App Store privacy information

The App Store listing provides Apple’s privacy disclosure for the app version available there. This policy additionally explains website visits, email and provider processing. On-device subscription storage does not mean that no information reaches Apple, TelemetryDeck or the providers used to deliver content. We update these disclosures when the relevant practices change.

Security

Aurabill uses iOS app isolation and system data protection for local storage. Protecting your device, passcode, Apple Account and backups is also important. The app does not add a separate encryption layer. Shared downloads use HTTPS and are validated before replacing the last working local copy.

No system is completely secure. If you believe information has been exposed through Aurabill, contact us with enough detail to investigate and avoid including unnecessary sensitive data.

Changes to this policy

We will update the date above when this policy changes. Material changes will be described on this page and, where appropriate, through app release notes or another suitable notice. Content hosting and provider changes can occur independently of an app release. Where the law requires consent or advance notice, we will follow those requirements.

Contact

Acom Digital GmbH
Mannenriedstrasse 22
3074 Muri b. Bern, Switzerland
hello@aurabill.app

Also on this site: Terms of Use · Aurabill support and troubleshooting · Aurabill subscription tracker.