Privacy Policy

Fybas ("we", "us", "our") is an AI-powered subscription tracking platform. Our service is accessible at fybas.com and related subdomains. For any privacy-related questions, contact us at hello@fybas.com.

We collect only what is necessary to provide the service:

• Account information — your email address, display name, and password (hashed; we never see the plaintext).
• Subscription data — the subscription names, costs, billing cycles, and categories you manually enter into Fybas.
• Preferences — your country, currency, budget limits, theme, and notification settings.
• Usage data — anonymous interaction events used to improve the product (e.g. features used, error rates). This data is not linked to your identity.

We do not connect to your bank accounts, read your emails, or collect payment card information.

• To provide, maintain, and improve the Fybas service.
• To generate AI-powered insights and recommendations based on your subscription data.
• To send renewal alerts and notifications you have opted into.
• To respond to support requests you initiate.
• To detect and prevent fraud or abuse.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Fybas uses Google Gemini to generate personalised insights from your subscription data. When you trigger an AI analysis, a summary of your subscription list (names, costs, billing cycles) is sent to Google's API to generate recommendations. No personally identifying information beyond the subscription data is included in these requests. Google's use of this data is governed by their API terms of service.

Your data is stored in Supabase, a managed PostgreSQL database. We enforce Row Level Security (RLS) at the database level — every query is scoped to your user ID, meaning no application bug can expose another user's data to you, and vice versa.

All data in transit is encrypted via TLS. All data at rest is encrypted by the storage provider.

Your data is retained for as long as your account is active. If you delete your account, your personal data and subscription records are permanently deleted within 30 days. Anonymised, aggregated usage data may be retained indefinitely.

You have the right to:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate data via your Settings page.
• Deletion — request permanent deletion of your account and all associated data.
• Portability — export your subscription data in a machine-readable format.
• Objection — opt out of analytics data collection at any time.

To exercise any of these rights, email hello@fybas.com.

Fybas uses only essential cookies required for authentication (session tokens). We do not use advertising or tracking cookies.

If we make material changes to this policy, we will notify you via email and update the "Last updated" date at the top of this page. Continued use of Fybas after changes take effect constitutes acceptance of the updated policy.

For any privacy questions or requests: hello@fybas.com