Privacy Policy

RaseedGuard (“we”, “us”, or “our”) operates the RaseedGuard mobile application and website at raseedguard.com (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using RaseedGuard you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2.1 Information You Provide

• Account registration data (name, email address, password hash)
• Subscription, bill, and credit card details you manually enter
• Support communications you send to us

2.2 Information Collected Automatically

• Device identifiers, operating system, and app version
• Usage analytics (screens visited, features used) — anonymized
• Crash reports and performance diagnostics
• IP address and approximate geographic region

2.3 Google/Microsoft Email Scanning (Premium Feature)

If you connect Gmail or Outlook, we request read-only OAuth 2.0 access (Gmail API scope:gmail.readonly) to scan for subscription-related emails. We extract only structured transaction data (merchant, amount, date) from qualifying messages. We do not store raw email content or subject lines, and we do not access, read, or process personal, medical, or unrelated correspondence. OAuth tokens are stored encrypted and can be revoked at any time from your account settings or directly from your Google Account permissions page.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data obtained through this feature is:

• Used only to provide or improve the subscription-tracking features you have enabled;
• Never used or transferred for serving advertisements, including retargeting, personalised, or interest-based advertising;
• Never sold, rented, or licensed to data brokers or third parties;
• Never used to train general-purpose AI or machine learning models that are not directly related to providing or improving RaseedGuard’s user-facing features;
• Not read or reviewed by human employees or contractors, except where necessary for security purposes (e.g. investigating abuse), to comply with applicable law, or with your explicit consent.

• To provide, operate, and maintain the Service
• To send payment reminders, renewal alerts, and account notifications
• To generate AI-powered budget insights and analytics
• To improve and personalise the Service
• To respond to customer support requests
• To detect fraud, abuse, and security incidents
• To comply with legal obligations

We never sell your personal data, including any Google user data, to third parties.

All sensitive financial fields (subscription amounts, card numbers, account details) are encrypted at rest using AES-256-GCM before being written to our database. Data in transit is protected by TLS 1.2 or higher. Access to production data, including any Google user data, is restricted to authorised RaseedGuard personnel only, on a need-to-know basis, and is never shared with advertisers.

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data at any time via Settings → Delete Account, or by emailinginfo@raseedguard.com. Deletion requests have a 14-day cool-off period — you are signed out immediately, and logging back in during that window cancels the request. Data is permanently erased after the cool-off period, except where retention is required by law. Revoking Gmail/Outlook access immediately stops any further data collection from that account; previously extracted transaction data is deleted per the schedule above.

We do not sell your personal data. We disclose data only to the specific categories of recipients listed below, and only for the purposes described.

6.1 Service Providers (Data Processors)

These providers process data on our behalf, under contractual confidentiality and data-protection obligations, and do not use it for their own purposes:

• Firebase (Google LLC) — authentication, push notifications, crash/performance reporting. Receives: device identifiers, crash logs, authentication tokens.
• Lemon Squeezy — payment and subscription processing (merchant of record). Receives: billing details, subscription status, transaction history. We do not store raw card numbers ourselves; card data is handled entirely by Lemon Squeezy and its payment processors.
• Google Cloud Run & Google Cloud SQL (Google LLC) — application hosting and encrypted database storage of account and app data.

6.2 Google User Data Specifically

Data obtained via Gmail/Outlook OAuth access (see Section 2.3) is transmitted only to our own backend infrastructure hosted on Google Cloud Run and stored in Google Cloud SQL (listed in 6.1), solely to extract and store structured subscription data. It is not shared with, transferred to, or accessible by any other third party, advertiser, or analytics provider — including Lemon Squeezy — and is never combined with advertising identifiers.

6.3 Legal & Safety Disclosures

We may disclose data, including Google user data, if required to do so by law, subpoena, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, investigate fraud, or ensure user safety.

6.4 Business Transfers

If RaseedGuard is involved in a merger, acquisition, or asset sale, your data may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

We do not share, transfer, or disclose Google user data to any party for advertising purposes, and we do not permit any third party listed above to use Google user data for any purpose other than providing the specific service described.

Regardless of your location, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — export your data in CSV or JSON format (Premium)
• Objection — opt out of analytics or marketing communications
• Withdraw consent — revoke email scanning access at any time

To exercise these rights, contact us at info@raseedguard.com.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email at least 14 days before the change takes effect. Continued use after the effective date constitutes acceptance.

If you have questions about this Privacy Policy, please contact us at: info@raseedguard.com