Legal

Privacy Policy

Cancely keeps a list of your subscriptions so it can total them, remind you before they renew, and help you cancel. This page explains exactly what that involves. Short version: we collect only what the tracker needs, we never connect to your bank, we never sell your data, and you can export or delete everything from Settings at any time.

Who is responsible

Bojan Pavlukovic PR / Kreativni Kliker, a sole proprietor registered in the Republic of Serbia, company no. 67424042, tax ID (PIB) 114239265 (“we”) runs Cancely at cancely.kreativnikliker.com and is the controller of the personal data described here. Questions and requests go to support@cancely.kreativnikliker.com.

What we collect

Your account

• Email address, an optional name, and a hashed password (we never store the password itself).
• If you sign in with Google: your Google account ID, email and name.
• Settings: home currency, time zone (so reminders arrive on your clock), reminder preferences and, if you turn on two-factor authentication, an encrypted authenticator secret and hashed backup codes.

Your subscriptions

Whatever you enter or import: service name, plan, price and currency, billing cycle, renewal dates, category, and optional notes such as who you share it with or which card pays for it. This is the core of the product and is only ever shown to you.

Imports

• CSV files are parsed during the upload. Only the rows you confirm are saved, as subscriptions; the file itself is not kept.
• Forwarded receipts sent to your personal forwarding address are stored as the original sender, subject line and a short text snippet, so you can review them. They stay until you import or dismiss them, or delete your account.
• Gmail auto-detect — see the next section.

Billing

If you buy a paid plan, payment is handled by Creem (see below). We receive and store your Creem customer, subscription and order IDs, which plan you bought, and the subscription’s status and dates. We never see or store your card details.

Family households

If you’re in a Family household, the other members see your name, your email address and when you joined. They see a subscription of yours only if you share it with the household — its name, plan, price, billing dates and status, and whose card it’s on and who splits its cost if you say so — and they can’t change it. If you name another member as the one who pays, they get its renewal reminders. Everything else stays private to you. To invite someone, the household’s owner gives us their email address, which we use only to send the invitation; an invitation that isn’t accepted expires after 7 days. When you leave the household, or it is deleted, what you shared goes back to private.

Telegram

If you connect Telegram (a Pro option), we store the ID of your chat with the Cancely bot and when you connected it. Reminders sent there contain the subscription’s name, plan, price and renewal date. Pressing a button on a reminder (“Already cancelled”, “Remind me tomorrow”) updates your account accordingly. Send /stop to the bot or press Disconnect in Settings to remove the chat ID.

Web push notifications

If you turn on browser notifications (a Pro option), your browser gives us a push subscription: a unique address at your browser vendor’s push service plus two encryption keys, which we store along with when you enabled it. Notifications contain the subscription’s name and renewal date and are delivered through that push service (Google, Mozilla or Apple, depending on your browser). Turn them off in Settings, or block notifications for the site in your browser, to remove the subscription.

Security and technical data

• IP addresses, used briefly in rate-limit counters on sign-in, sign-up and password reset to block brute-force attempts. Counters expire within the hour.
• Error reports, if error monitoring is enabled: the page or request that failed, a stack trace, and browser and device type. They are used only to fix bugs.
• Standard server logs kept on our server and by Contabo for a short period.

Gmail access

Connecting Gmail is optional and available only if you choose it. When you do, Cancely asks Google for read-only access (the gmail.readonly scope) and uses it for one purpose: finding subscription receipts so it can suggest subscriptions for you to add.

• Each scan searches the last 12 months for billing-type messages (receipts, invoices, renewals) and fetches only their sender, subject, date and Gmail’s short preview snippet — never the full message body or attachments.
• These are processed in memory to produce suggestions and are not stored. Only suggestions you explicitly accept become subscriptions in your account.
• We store the OAuth tokens Google issues, encrypted, so you don’t have to reconnect for every scan. Disconnecting Gmail in Cancely deletes them and revokes the access at Google. You can also revoke it any time at myaccount.google.com/permissions.
• Cancely never sends, modifies or deletes email, and no person at Cancely reads your mail.

Cancely’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Gmail data for advertising, do not sell it, do not transfer it to third parties except as needed to run this feature or comply with the law, and do not use it to train AI or machine-learning models.

Why we use it (legal bases)

• To provide the service you signed up for (performance of a contract): your account, subscriptions, imports, reminders and billing.
• Legitimate interests: keeping accounts secure, preventing abuse, and fixing errors.
• Consent: connecting Gmail. You can withdraw it by disconnecting.
• Legal obligations: records Creem or we must keep for tax and accounting.

Emails and messages we send

Account emails (verification, password reset) and, unless you switch them off in Settings, reminders before a subscription renews or a free trial starts charging — by email and, if you connected them, on Telegram and as browser notifications. Every reminder email has a one-click unsubscribe link. We use your time zone so reminders don’t reach you in the middle of the night. We don’t send marketing email or messages.

Who processes data for us

We use a small number of service providers. They process data only on our instructions and only for the purpose listed:

• Contabo (Contabo GmbH, Germany) — hosting. Cancely runs on a Contabo virtual server, which also holds the database with your account and subscriptions. Contabo automatically logs the usual request data (IP address, date and time, page requested, browser type) for security and troubleshooting. See Contabo’s privacy policy.
• Resend — delivery of account and reminder emails.
• Our inbound-email provider — receiving receipts you forward to your Cancely address.
• Creem (Armitage Labs OÜ, Estonia) — checkout, payment and invoicing for paid plans. Creem is the merchant of record: you give your name, email address and payment details directly to Creem, which processes them as controller under its own privacy policy.
• Google — sign-in with Google and, if you connect it, Gmail access.
• Telegram — delivery of reminders, if you connect it.
• Your browser’s push service (Google, Mozilla or Apple) — delivery of browser notifications, if you turn them on.
• Sentry — error monitoring, when enabled.

Exchange rates are fetched from the public ECB feed; no personal data is sent to it. We don’t sell personal data, share it with advertisers, or use third-party analytics or advertising trackers.

International transfers

Cancely is run from Serbia. Some of the providers above process data outside the European Economic Area and Serbia, including in the United States. Where they do, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

Cookies and local storage

• A session cookie that keeps you signed in (strictly necessary).
• cancely-home — your home currency before you have an account.
• cancely-theme in your browser’s local storage — light or dark mode.
• Creem’s checkout page sets its own cookies when you go there to pay.

We don’t use advertising or cross-site tracking cookies, so there is no cookie banner.

How long we keep it

Everything tied to your account is kept until you delete the account. Deleting it from Settings erases your profile, subscriptions, forwarded receipts, Gmail connection and reminder history immediately, cancels any paid subscription and revokes Gmail access at Google. Copies may remain in encrypted database backups until they rotate out, for at most 30 days. Invoices and payment records held by Creem are kept as tax law requires.

Your rights

You can access, correct, export and delete your data yourself: edit anything in the app, download everything as a file from Settings, or delete your account there. You can also ask us to restrict or object to processing, or to port your data, by writing to support@cancely.kreativnikliker.com. We answer within 30 days. If you think we’ve handled your data wrongly, you can complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or to the data-protection authority where you live.

Security

Passwords are hashed with bcrypt, Gmail tokens and two-factor secrets are encrypted at rest, all traffic uses HTTPS, and sign-in is rate-limited, with optional two-factor authentication. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority as the law requires.

Children

Cancely is not meant for children under 16 and we don’t knowingly collect their data.

Changes

If we change this policy in a way that matters, we’ll email you before it takes effect. The date at the bottom always shows the latest version. See also our Terms of Service.

Last updated 28-10-2026.