The short version

We hold only what we need to run the service: your email, a name (if you give one), a securely-hashed password, the subscriptions you enter, and the alerts we create from them. We never ask for — and never have access to — your bank login or payment methods. We do not sell your data. You can delete everything with one click, anytime.

What we collect

Account data. Your email address, an optional name, a hashed password (never stored in plain text), your plan, and the date you joined.

Your audit data. The subscriptions you add — service name, price, billing cadence, category, when you last used it, and your renewal dates.

Alerts and settings. Price-hike and renewal alerts we generate, your email-alert preference, and which alerts we've sent so we don't repeat them.

Technical data. Standard server logs (IP address, timestamps, request paths) used to keep the service running and safe from abuse.

What we don't collect

No bank credentials, no card numbers, no reading of your statements, no contact list, no location tracking. Our model is that you type in your subscriptions. It keeps your financial life private.

How we use your data

To create your audit and savings report, to send the emails you've asked for (verification, password reset, price-hike and renewal alerts, and the optional weekly savings digest), to sync your audit across your devices, and to keep the service secure.

Emails we may send

We only send transactional email (confirming your account, resetting your password) and the alerts or digest you've enabled. You can pause alerts anytime from settings, and you can disable the digest by turning off email alerts.

Sharing

We don't sell, rent, or trade your personal data. We use standard email-delivery services to send the emails above, and standard hosting infrastructure to run the servers. Those providers may process your data on our behalf under their own contracts; we choose providers who treat data responsibly.

Security

Passwords are stored as salted scrypt hashes — one-way, never reversible. Traffic is served over HTTPS. Session tokens are random, HttpOnly, and time-limited. We apply rate-limiting, strict origin checks, and standard hardening headers. No system is perfectly secure, but we design for data minimization: we don't hold data we don't need.

Retention & deletion

We keep your data while your account is active. You can delete your account at any time from Settings — this permanently removes your subscriptions, alerts, and sessions (account deletion is immediate and not reversible).

Your rights

Depending on where you live, you may have rights to access, correct, or delete your data, and to object to or restrict processing. To exercise any of these, email us at hello@feemend.com. We'll respond promptly.

Children

FeeMend is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update this page and date it so you can see what changed.