1. Who operates the app and website

One More Sub and this website are operated by Central Cloud Solutions Ltd (“we”, “us”, “our”), the controller of the personal data described here.

Company registration number: 17348044.

Registered address: N1 7GU, London.

Country of establishment: United Kingdom.

Privacy questions go to [email protected].

2. Scope of this policy

This policy covers the One More Sub mobile app for iOS and Android, and the website at centralcloudsolutions.com, including its contact form.

It does not cover the services you track in the app. If you record a subscription to a streaming service, that provider’s own privacy policy governs your relationship with them. We have no connection to them and receive nothing from them.

3. Information you provide

Everything the app knows about your subscriptions, you typed in. Specifically:

• Your name and email address, when you create an account.
• The subscriptions you add: provider name, amount, currency, billing cycle, first billing date, next renewal date, status, an optional cancellation date and optional notes.
• Custom services you create, which are stored as a name.
• Your preferences: base currency, default reminder timing, notification setting and theme.
• What you write to us through the contact form or by email.

The app does not connect to your bank, card or any financial institution, and it has no access to your email inbox. There is no mechanism in the app to import your subscriptions automatically, which is why you enter them yourself.

4. Account and login information

Accounts are handled by Firebase Authentication, a Google service. You can sign in in four ways:

• Email and password. We store your email address and Firebase stores a cryptographic hash of your password — we never see or store the password itself. A verification email is sent to confirm the address is yours.
• Google. Google confirms your identity and returns your email address, name and a stable user identifier.
• Facebook. Facebook confirms your identity and returns the basic profile information you approve, typically your name and email address.
• Apple. Apple confirms your identity and returns a user identifier and, if you allow it, your name and email address. If you choose Hide My Email, Apple gives us a relay address instead of your real one, and that is all we ever have.

We store, in your user record: your account identifier, name, email address, which sign-in providers you have used, whether the address is verified, your preferences, and timestamps for when the record was created and last updated. We never receive your password from a social provider, and we never receive your social media contacts, posts or activity.

5. Subscription-tracking data

Your subscriptions are stored in Cloud Firestore under your account, so they are available when you sign in on another device. Each record holds what you entered, plus values the app derives from it: the amount converted into your base currency, the exchange rate used, the rate’s provider and effective date, and the normalised monthly cost.

Access rules restrict every record to the account that created it. We do not use your subscription data to build a profile of you, and we do not sell or share it for marketing.

6. Device and technical information

The app stores your sign-in session and cached data on your device so it works between launches. When the app talks to our backend, our provider records ordinary technical details: the request, a timestamp, an IP address and a user agent. Firebase App Check is used to check that requests come from a genuine copy of the app rather than an automated script.

On the website, our hosting provider keeps standard server logs — IP address, request path, timestamp, user agent — for security and troubleshooting. When you use a form, your IP address is used to enforce rate limits so the form cannot be abused.

The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK and no tracking pixels. The website loads no analytics, tag manager, advertising or session-replay script. We do not track you across other apps or websites.

7. Notification data

Renewal reminders are scheduled locally on your device by the operating system. There is no push-notification server, and no notification token is collected or sent to us. The content of a reminder — the service name, the amount, the date — never leaves your phone.

You control notifications in the app’s settings and in your device settings. Because delivery is handled by your operating system, focus modes, battery savers and permission settings can affect whether a reminder appears.

8. Currency conversion

To show your totals in one currency, our backend requests exchange rates from the Frankfurter API, which publishes European Central Bank reference rates.

What is sent to the rate provider: a source currency code, a target currency code and a date — for example “EUR to USD on 2026-08-04”. No amount, no subscription name, no account identifier and no personal data of any kind is sent. Retrieved rates are cached in our own database for up to a day to limit the number of requests.

Converted values are informational estimates. The amount you are actually charged is set by the subscription provider and your payment provider.

9. Optional support purchases

The app includes an optional one-time support purchase. It unlocks nothing — every feature is free — and it is entirely voluntary.

Payments are processed by Apple or Google, not by us. We never receive your card number, bank details, billing address or any other payment credential. When a purchase completes, the store returns a receipt or purchase token, which our backend checks with the store to confirm the purchase was genuine. What we retain is a record that a support purchase was made on your account, its product identifier, amount and timestamp.

Refunds are handled under Apple’s and Google’s own policies. See the Terms of Use.

10. Contact-form information

This website is a standalone information site. It has no database, no accounts and no connection to the app’s systems — the only information it handles is what you type into the contact form, which is forwarded to our support inbox and not stored on the site.

When you use the contact form we receive:

• your name, email address, subject and message;
• the application, category and platform you selected;
• the app version and operating-system version, if you enter them;
• your IP address, used for rate limiting and abuse prevention.

The message is delivered to our support inbox by Resend, our email provider. Your email address is set as the reply-to address so we can answer you. Cloudflare Turnstile runs an anti-spam check on the form; it sets no advertising or analytics cookies.

11. How we use information

• To create and maintain your account and let you sign in.
• To store, display and synchronise the subscriptions you enter.
• To calculate totals and convert amounts into your base currency.
• To schedule the reminders you ask for.
• To answer your support messages.
• To action account-deletion requests you send us by email.
• To keep the service secure, prevent abuse and diagnose faults.
• To meet legal obligations that apply to us.

We do not use your information for advertising, profiling or automated decision-making that has a legal or similarly significant effect on you.

Where the UK GDPR or EU GDPR applies, our legal bases are: contract (to provide the app you signed up for), legitimate interests (keeping the service secure and preventing abuse), consent (device notification permission, and any optional feature you switch on), and legal obligation (records we are required to keep).

12. Service providers and processors

We use a small number of providers. Each processes data on our instructions.

We do not use analytics or crash-reporting services. If that ever changes, this policy and the underlying data inventory will be updated before the change goes live, and consent will be sought where the law requires it.

13. Data sharing

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share it only:

• with the providers listed above, to run the service;
• when you ask us to, or with your consent;
• if we are legally required to — for example a valid court order — in which case we disclose only what is necessary;
• to establish, exercise or defend legal claims, or to investigate abuse of the service;
• to a successor entity if the business is transferred, in which case you will be told before your data becomes subject to a different policy.

14. International processing

Our backend runs in Google Cloud’s us-central1 region, so account and subscription data is processed in the United States. Our website host, email provider and anti-spam provider also operate internationally. Where personal data is transferred out of the UK or European Economic Area, transfers rely on the appropriate safeguards our providers offer, such as Standard Contractual Clauses.

15. Security

Measures we actually have in place:

• Traffic between the app, the website and our backend is encrypted in transit (HTTPS).
• Data at rest is encrypted by our cloud provider.
• Database rules restrict every record to the account that owns it.
• Passwords are stored only as hashes, by Firebase Authentication — never by us in plain text.
• Firebase App Check helps reject requests that do not come from the genuine app.
• Deleting an account requires re-authentication and an explicit typed confirmation.
• The website sets restrictive security headers and validates all form input on the server.
• Forms are rate-limited and protected by an anti-spam check.

No service can promise perfect security, and we do not claim to. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority where the law requires it.

16. Retention

• Account and subscription data: kept while your account exists. Deleting your account removes it.
• Exchange-rate cache: holds currency codes and rates only, with no link to any user.
• Export files: generated on request and short-lived; the export links our backend issues expire one hour after they are created.
• Server and hosting logs: kept on our providers’ standard schedules, typically a matter of weeks, for security and troubleshooting.
• Support correspondence: kept for 12 months after your enquiry is closed, then deleted.

17. Account and data deletion

You can delete your account and its data at any time from inside the app: open the Settings tab, go to the Account section and tap Delete Account. You confirm, type DELETE, and — if you signed up with an email address and password — re-enter your password. Deletion is permanent and immediate; there is no grace period.

If you can no longer sign in, email us from the address on the account — see the account deletion page. We reply to that address to confirm the request is yours before anything is deleted.

Deletion removes your account, subscriptions, custom services, export records and support purchase records. Store transaction records held by Apple or Google, support correspondence and technical logs may persist as described in section 16.

18. Data export

You can export your subscriptions as JSON or CSV at any time from Settings → Export Data, without asking us. The file is produced on your device and shared through your device’s normal share sheet.

19. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent you have given. You may also lodge a complaint with your data-protection authority.

Most of these you can exercise yourself in the app: correcting your details in your profile, exporting your data, and deleting your account. For anything else, write to [email protected]. See the privacy choices page for the fastest route to each. We answer within one month, and will tell you if we need longer.

We do not charge for these requests unless a request is manifestly unfounded or excessive. We may need to verify that the request comes from you before we act on it.

20. Children and age eligibility

One More Sub is a personal finance tracking tool intended for adults. You must be at least 13 to create an account. We do not knowingly collect personal data from children. If you believe a child has created an account, write to [email protected] and we will delete it.

21. Changes to this policy

We update this policy when the app or website changes in a way that affects it. The “last updated” date at the top always reflects the current version. For material changes we will give notice in the app or by email before the change takes effect. Continuing to use the service after a change means you accept the updated policy.

22. Contact details

Privacy and data-protection: [email protected]
General support: [email protected]
Or use the contact form.

Postal address: Central Cloud Solutions Ltd, N1 7GU, London.

23. Effective date

This policy is effective from 2026-08-04 and was last updated on 2026-08-04.

1. Acceptance of these terms

These terms form an agreement between you and Central Cloud Solutions Ltd (“we”, “us”). By creating an account, installing One More Sub or using centralcloudsolutions.com, you accept them. If you do not accept them, do not use the app or the website.

Our Privacy Policy explains how we handle your information and forms part of these terms.

2. What One More Sub is, and is not

One More Sub is a tracking tool. You record the subscriptions you pay for, and the app shows you what renews next and what it costs.

• It does not provide banking, accounting, investment, tax or financial advice. Nothing in the app is a recommendation, and you should not treat its figures as professional advice.
• It does not cancel subscriptions with third-party providers. The app has no ability to contact a provider on your behalf. Cancelling is always something you do with that provider, or through your App Store or Google Play subscription settings.
• It does not guarantee that every reminder will be delivered. Reminders are scheduled on your device and delivered by your operating system; permissions, focus modes, battery settings and device state can all affect them.
• It has no connection to your bank or cards. It knows only what you type in.

3. Eligibility

You may use One More Sub only if you can form a binding contract where you live, and you must be at least 13 years old. You may not use it if we have previously terminated your account.

4. Your account

You can create an account with an email address and password, or by signing in with Google, Facebook or Apple. You are responsible for:

• giving accurate account details and keeping them current;
• keeping your password and your linked accounts secure;
• everything done through your account.

Email sign-up requires verifying your address. Tell us promptly at [email protected] if you believe your account has been accessed without your permission.

5. The data you enter

The subscription records you create are yours. You are responsible for their accuracy — the app can only calculate from what you enter, and a wrong amount or date produces a wrong total or a mistimed reminder.

You grant us only the permission needed to run the service: to store your records, display them back to you, synchronise them to your devices and calculate totals from them. We claim no ownership of your data and do not use it for any other purpose.

6. Reminders and device limitations

Reminders are a convenience, not a guarantee. They are scheduled locally by your device, so delivery depends on notification permissions, focus and do-not-disturb settings, battery optimisation, whether the device is on, and the behaviour of your operating system.

You remain responsible for managing your own subscriptions and payments. We are not liable for a charge you did not expect, a renewal you meant to cancel, or a reminder that did not arrive.

7. Currency conversion estimates

Amounts converted into your base currency are estimates, calculated from published European Central Bank reference rates retrieved through a third-party provider and cached for up to a day. They are provided for comparison only.

The amount you are actually charged is determined by the subscription provider and your payment provider, including any conversion fee or spread they apply. Converted totals in the app will not match your statement exactly.

8. Third-party subscription providers

Service names in the app’s catalogue are there so you can find and label your own subscriptions. All product names and trademarks belong to their respective owners. One More Sub is not affiliated with, sponsored by or endorsed by any of the services you track, and we have no relationship with them.

9. Optional support purchases

The app offers an optional one-time support purchase. It is voluntary, it unlocks no features, and every part of the app works without it. It is not a subscription and does not renew.

Payment is processed by Apple or Google, under their terms, using the payment method on your store account. We do not receive or store your payment card details. We receive confirmation from the store that a purchase completed.

10. Refunds

Because the store processes the payment, refunds for a support purchase are handled under Apple’s or Google’s applicable policies, and you request them through the store. Where consumer law in your country gives you a right of withdrawal or refund, that right applies regardless of this section.

11. Acceptable use

You agree not to:

• use the service unlawfully, or to store unlawful content;
• attempt to access another user’s account or data;
• probe, scan or test the security of the service, or circumvent its rate limits, anti-spam checks or access controls;
• use automated means to create accounts, submit forms or extract data from the service;
• reverse engineer, decompile or resell the app except where the law expressly allows it;
• interfere with the service’s operation or place an unreasonable load on it;
• impersonate anyone, or misrepresent your affiliation with a person or organisation.

12. Intellectual property

The app, the website, their design, code, text, logos and artwork belong to us or our licensors, and are protected by intellectual-property law. You get a personal, non-exclusive, non-transferable, revocable licence to use the app for your own purposes in line with these terms. Nothing here transfers ownership of anything to you.

13. Availability and changes

We work to keep the service available but do not promise uninterrupted service. We may change, suspend or discontinue features, and we may update these terms. If a change is material we will give reasonable notice through the app, the website or by email. Continuing to use the service after a change takes effect means you accept it.

14. Export and account deletion

You can export your subscriptions as JSON or CSV at any time from Settings → Export Data, and delete your account and its data from Settings → Account → Delete Account. Deletion is permanent. If you cannot sign in, use the account deletion page.

15. Third-party services

The service depends on third-party providers, including Google Firebase for accounts and storage, Apple and Google for distribution and payments, an exchange-rate provider, and the providers that run this website. Their availability and their own terms are outside our control. We are not responsible for their acts or omissions.

16. Disclaimers

To the fullest extent permitted by law, the service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement.

We do not warrant that the service will be uninterrupted or error-free, that reminders will always be delivered, that converted amounts will match what you are charged, or that the catalogue of services is complete or current.

Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud. If you are a consumer, your statutory rights are unaffected.

17. Limitation of liability

To the fullest extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data, or missed cancellation opportunities, arising from your use of the service.

Where liability cannot be excluded, our total liability arising out of or relating to the service is limited to the greater of the amount you have paid us in the twelve months before the claim, or ten pounds sterling or its local equivalent — the app being free of charge.

18. Termination

You may stop using the service and delete your account at any time. We may suspend or terminate your access if you materially breach these terms, if we are required to by law, or if we discontinue the service. Where it is reasonable and lawful to do so, we will give notice and an opportunity to export your data first.

19. Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction over any dispute — except that, if you are a consumer, you keep the benefit of any mandatory protections of the law where you live.

20. Contact

Questions about these terms: [email protected], or use the contact form.

Central Cloud Solutions Ltd, N1 7GU, London.

These terms were last updated on 2026-08-04.