Who we are
RenewalGuard is a subscription, bill and free-trial reminder service available on the web, iPhone and Android. It is operated by Fortuna Streams Ltd, a company registered in England and Wales (company number 14965200), London, United Kingdom ("we", "us", "our"). Fortuna Streams Ltd is the data controller for the personal data described in this policy. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC137394.
Contact us about privacy at cris@fortunastreams.com.
No bank access
RenewalGuard never connects to your bank, payment cards or financial accounts. You add subscription details yourself.
What we collect
- Account details: your email address, password (stored securely by our hosting provider, never visible to us), and optional display name.
- What you enter: subscription and bill names, categories, costs, currencies, billing cycles, renewal and trial dates, status, notes, cancellation links, colours, personal/business tags, and any icon image you choose to upload or photograph.
- Settings and history: your reminder preferences (such as email reminders on/off and reminder timing), plan type (Free or Paid) and a log of reminder emails we have sent.
- Technical data: basic information our hosting provider records when you use the service, such as IP address, browser or device type and timestamps, used for security and to keep the service running.
Stored only on your device
The app keeps your login session in your device's secure storage (Keychain on iPhone, Keystore on Android). Your phone notification settings, alert time, theme and colour choices are stored on your device only. Phone reminders are scheduled locally on your device — we do not use push-notification services to send them.
How we use your data and our legal basis
- To provide RenewalGuard — your account, your list, totals and reminders (performance of our contract with you).
- To send reminder and account emails such as verification codes and password resets (performance of contract).
- To keep the service secure and working, prevent abuse and fix problems (our legitimate interests).
- Camera and photos are used only if you choose to add an icon, and notifications only if you allow them (your consent, which you can withdraw in your device settings).
We do not sell your data, use it for advertising, or share it with third parties for their own marketing. Each account can access only its own records.
Who processes data for us
We use trusted service providers who process data only on our instructions:
- App hosting and database — our app platform provider (Base44) stores your account and subscription data and runs the service, including sending reminder emails through its email delivery service.
- App distribution and payments — Apple (App Store) and Google (Google Play). If Paid plans are offered through in-app purchase, payment is handled by Apple or Google; we never receive your card details.
- Service logos — the app displays logos for popular services by requesting the service's website icon from Google's public favicon service. This request contains the service's web address (e.g. netflix.com) and, like any web request, your device's IP address — never your account details.
International transfers
Some of our providers may process data outside the UK, including in the United States and Israel. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
How long we keep data
We keep your account and subscription data for as long as your account is open. When you delete your account, your account, subscriptions and reminder history are deleted immediately and permanently from our live systems; residual copies may remain in our hosting provider's encrypted backups for a limited period before being overwritten. If an account is inactive and you ask us to close it, we delete it in the same way.
Security
Data is encrypted in transit (HTTPS/TLS). Access to records is restricted so each account can only read its own data, your login session is held in your device's secure storage, and we only use reputable providers. No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how it is used, receive a copy in a portable format, and withdraw consent at any time. You can delete your account yourself at any time — see how to delete your account — or email us and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to help first.
Children
RenewalGuard is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we make important changes we will update the date at the top of this page and, where appropriate, let you know in the app or by email.
Contact
Fortuna Streams Ltd, London, United Kingdom · cris@fortunastreams.com