This Privacy Policy explains how Shops Up Group ("Cinch", "we", "us") collects, uses, and protects your information when you use the Cinch mobile app and related services (the "Service"). By using the Service you agree to this Policy.
Cinch helps you find and manage recurring subscriptions by reading receipt and billing emails in your connected inbox. Contact us at shopsupgroup@gmail.com with any privacy question or request.
a. Account information. When you sign in with Google or Apple we receive your name and email address to create and identify your account.
b. Gmail content (read-only), with your consent. If you connect a Google inbox, you
grant Cinch the gmail.readonly scope. We use it only to find
subscription-related mail. Specifically we search your mailbox for receipt/renewal/subscription-like
messages, read the metadata (sender, subject, date) of candidate messages, and read the contents of a
limited number of representative billing emails, so we can extract the merchant, price, billing cycle,
renewal date, trial status, and payment problems for each subscription. We do not read your
whole mailbox, and we do not access non-billing email for any other purpose.
c. Subscription data we derive. The subscription details extracted from those emails (name, amount, currency, billing period, renewal date, status), stored so the app can show your dashboard.
d. Authentication tokens. A Google OAuth refresh token, stored encrypted at rest (AES-256-GCM) on our servers, so scans keep working without repeated sign-in.
e. Device push token. If you enable notifications, your push token, so we can alert you to renewals, price changes, and payment problems.
f. Basic usage/diagnostic data needed to operate and secure the Service.
We do not collect payment card numbers, bank credentials, or your Gmail password.
We do not sell your personal information, and we do not use your email content for advertising.
Cinch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
We share data only with service providers that process it on our behalf, under confidentiality and security obligations:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, backend hosting | Account info, subscription data, encrypted tokens, push token |
| Anthropic (Claude API) | Extracting subscription details from billing emails | The limited email content in §2(b). Per Anthropic's API terms, inputs are not used to train their models. |
| Sign-in and Gmail API access | OAuth and Gmail data you authorize | |
| Expo | Delivering push notifications | Push token and notification content |
| Google Play Billing / RevenueCat | Processing the premium subscription payment | Purchase and entitlement status (no card data reaches us) |
We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the Service.
We keep your data while your account is active. Extracted subscription data and encrypted tokens persist until you delete a subscription, disconnect the inbox, or delete your account. We retain limited records where required for legal or security reasons.
Depending on where you live (e.g. EEA/UK, California), you may have additional rights to access, correct, port, or delete your data; contact us to exercise them.
We encrypt OAuth refresh tokens at rest, enforce per-user row-level access controls, and transmit data over encrypted connections (TLS). No method of storage or transmission is 100% secure, but we work to protect your information.
The Service is not directed to children under 13, and we do not knowingly collect their personal information.
Your information may be processed in countries other than your own, including where our providers operate. We take steps to ensure appropriate safeguards for such transfers.
We may update this Policy. Material changes will be communicated in the app or by email, and the "Last updated" date above will change.
Shops Up Group
shopsupgroup@gmail.com