Privacy Policy

Effective date: April 1, 2026

HeapMem LLC ("HeapMem", "we", "us", or "our") operates FlipSub, a subscription management application. This Privacy Policy explains what data we collect, why we collect it, and how we handle it.

1. Data We Collect

We collect only the bare minimum data required for the app to function:

Google account information: Your email address and name, obtained through Google OAuth when you sign in.
Information extracted from subscription-related emails: The sender name, service name, subscription status, billing amount, and renewal or billing dates. We process the email body to extract these fields but do not retain it.

FlipSub does not scan your inbox. With your explicit permission, we ask Gmail for messages from a fixed allowlist of subscription senders, and Gmail filters server-side — emails from senders outside the allowlist are never delivered to FlipSub or read by us. The current allowlist is published at flipsub.com/supported-services.

2. Data We Do Not Collect

We do not collect payment card numbers, bank account details, or other financial credentials. If we introduce paid features, payment processing will be handled by a third-party provider (such as Stripe), and we will not store your payment information on our servers.
We do not collect device identifiers or location data.
We never share your Google OAuth access tokens with third parties or use them for any purpose other than reading subscription-related messages on your behalf.

3. How We Use Your Data

Your data is used solely to:

Display your active subscriptions and their costs.
Help you manage, cancel, or restart subscriptions.
Authenticate your identity within the app.
Diagnose and improve the service.

For diagnostic purposes, we log subscription management actions and, when one fails, record the user, service, subscription state, and the step at which the failure occurred. These logs are stored in our own systems, reviewed only by HeapMem personnel, and never shared with third-party analytics services.

4. Data Sharing

We do not sell or share your personal data.

We rely on a small number of service providers to operate FlipSub, and share only the minimum data necessary with each:

Google Cloud (United States): Hosts our backend services and database. All account and subscription data is stored on Google Cloud infrastructure.
Anthropic (United States): We send the content of subscription-related emails to Anthropic's Claude API to extract structured information such as service names, amounts, and dates. Anthropic processes this data under its commercial terms and does not use it to train its models.

We do not share your data with any other parties except when compelled by law.

5. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication tokens, and access controls to protect your data.

6. Data Retention and Deletion

Deactivation: If you deactivate your account, we retain your data so you can easily reactivate and pick up where you left off. Your data remains subject to this Privacy Policy for as long as it is retained.

Deletion: You may permanently delete your account and personal data at any time from Settings → Delete Account inside the FlipSub app, or — if you no longer have the app installed — by emailing privacy@heapmem.com from the Gmail address you signed in with. See our account deletion page for step-by-step instructions. We will delete your personal data within 30 days, except:

We may retain a cryptographic hash of your email address to prevent abuse such as repeated trial signups. This hash cannot be used to recover your email or identify you.
We may retain records where required by applicable law (e.g., financial or tax obligations).

7. Google API Disclosure

FlipSub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Cookies and Tracking

FlipSub does not use cookies, web beacons, or similar tracking technologies on our website or in the app. We do not track users across other sites or services.

9. Age Requirement

FlipSub is intended for adults. You must be at least 18 years old, or the minimum age required in your jurisdiction, to use the service. We do not knowingly collect personal data from individuals below this age.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights regarding your personal information:

Right to know: You may request details about the personal information we collect, use, and share about you.
Right to delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
Right to correct: You may request that we correct inaccurate personal information we hold about you.
Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

We do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at privacy@heapmem.com, or follow the steps on our account deletion page to delete your account and associated data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

HeapMem LLC
privacy@heapmem.com