Privacy Policy
Last updated 27 July 2026
Cancelled is built by Sarl Studio. This policy explains what the Cancelled app for iPhone, iPad and Mac collects, what this website collects, and what we do with it. The short version: your subscriptions are stored on your device, there is no account to create, and we do not sell your data or use it for advertising.
What we do not collect
There is no sign up and no login. We never ask for your name, your address, or your date of birth. We have no bank connection and no access to any of your accounts, so we never see your balances, your card numbers, or your transactions.
We do not track you across other apps or websites, we show no adverts, and we do not sell or rent your information to anyone. Cancelled does not ask for permission to track, because it has nothing to track you with.
Where your subscriptions are stored
Everything you add to the app, the service names, the prices, the renewal dates, the notes, the categories and whether you cancelled something, is written to a database on your own device. It is not uploaded to us. We have no copy of it and no way to read it.
If your device is backed up to iCloud or to a computer, that backup includes the app's database, in the same way it includes any other app. Those backups are handled by Apple under Apple's terms, not by us.
What leaves your device
Four features need the internet. Each one is listed here with exactly what it sends and why.
- Service logos and brand search. When you search for a service to add, or when the app draws a logo, it asks Brandfetch for a brand matching what you typed or for the logo belonging to a website domain. Brandfetch receives the search text or the domain. It does not receive your prices, your dates, or anything else in your list.
- Finding where to cancel. When the app does not already know the cancellation route for a service, it can look one up. That lookup sends only the service name and its public website domain to our lookup service, which is powered by Google Gemini. It never sends your price, your renewal date, or your notes, and the result is cached so the same service is not looked up twice.
- Importing from a link. If you paste a Notion page or a Google Sheet link, the app fetches that page so it can read the subscriptions listed on it. Only the link you paste is fetched, and only when you paste it.
- What's New. The app checks our public changelog, hosted on UserJot, so it can show you what changed in a release. The request carries no information about you.
None of these calls carry an account identifier, because there is no account.
Photos and scanning
The scan and import features let you pick a screenshot or a receipt from your photos. The app never asks for access to your whole photo library. You choose the specific images, and iOS hands only those images to the app.
Reading the text out of those images happens entirely on your device using Apple's Vision framework. The images are not uploaded, and neither is the text pulled out of them.
Purchases
If you buy Cancelled Pro, the purchase is processed by Apple. We never see your card details or your Apple account.
We use RevenueCat to check whether a purchase is active. RevenueCat receives a random identifier generated on your device, along with the purchase information Apple provides, such as which product was bought and when it renews. That identifier is not linked to your name or your email, and it is not linked to the subscriptions you track. RevenueCat acts as our processor and has its own privacy policy at revenuecat.com.
Notifications
Reminders before a trial ends or a plan renews are scheduled on your device from the dates you entered. They are not sent from a server, so no one needs to know your renewal dates to deliver them. You can turn them off at any time in Settings.
This website
- If you join the waiting list, your email address is stored by Formspark so we can email you when the app launches. We use it for that and nothing else, and you can ask us to delete it at any time.
- We use Vercel Analytics and Vercel Speed Insights to count page views and measure loading speed. Both are cookieless, neither builds a profile of you, and neither follows you to other sites.
Deleting your data
Because your subscriptions live on your device, you are the one holding them. Open Settings, then Data, then Delete all subscriptions to erase them. Deleting the app removes its database along with it.
To have your waiting list email removed, write to hello@trycancelled.com and we will delete it.
Children
Cancelled is not directed at children under 13, and we do not knowingly collect information from them.
Your rights
Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, or to have it erased. In practice we hold very little: a waiting list email address if you gave us one, and a purchase identifier if you bought Pro. Write to us and we will act on any of those requests.
Changes
If this policy changes in a way that affects what we collect, we will update the date at the top of this page and describe the change in the app's What's New.
Contact
Questions about privacy go to hello@trycancelled.com, and a person reads them.