Privacy Policy

Billow for iPhone · Effective November 6, 2026

Billow is a subscription tracker made by Ervin Capi, an independent developer. Billow has no account, no server and no analytics. This policy explains the little data that ever leaves your iPhone.

What Billow stores, and where

Your subscriptions, prices, reminders, notes, attachments and settings are stored on your iPhone. If iCloud is turned on, they are also synced through your own private iCloud database so they appear on your other devices. Apple operates iCloud; the developer cannot access your iCloud data. See Apple's Privacy Policy.

What Billow does not collect

The developer does not collect, receive or sell any personal data. Billow has no sign-in, no advertising, no tracking, no third-party analytics and no crash-reporting SDKs.

Imports stay on your device

When you share a receipt, screenshot, PDF or bank statement with Billow, it is read on your iPhone to find recurring charges. The file is not uploaded anywhere. Photos and camera images are processed and not kept.

Mailboxes (optional)

You can connect a mailbox so Billow finds subscriptions in your email receipts. Connecting one is optional and no other feature needs it. Before you connect, Billow shows what it will read and store, and asks you to agree.

• Read on your iPhone only. Billow connects from your iPhone directly to your mail provider: Apple iCloud Mail, Google Gmail (where available) or another IMAP server you enter. Nothing passes through a server run by the developer, and no mail is ever uploaded.
• Only receipts. Billow fetches messages from the last 18 months whose subject mentions a receipt, invoice, renewal or subscription (or, for Gmail, that Gmail files as purchases). It opens the mailbox read-only, so nothing is marked as read, moved or deleted.
• Only the extracted fields are kept. From each receipt Billow keeps the merchant, amount, currency, date and billing cycle, plus the message ID and a fingerprint so the same email is not counted twice. The text, headers and attachments of each message are discarded right after reading.
• Passwords and sign-ins stay in your Keychain. App-specific passwords and sign-in tokens are stored only in this iPhone's Keychain. They are not synced to iCloud or sent anywhere else.
• Disconnect any time. Disconnecting a mailbox deletes its password or sign-in and everything Billow found in it. Where the provider offers it (Google), Billow also revokes its access. For iCloud you can delete the app-specific password at account.apple.com.

Google user data. If you connect Gmail, Billow requests read-only access (gmail.readonly) and uses it only to find subscription receipts as described above. The data is not used for advertising, not sold, not transferred to anyone and not read by people. Billow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Merchant logos

Service logos are built into the app. Showing a logo makes no network request and contacts no logo provider. Logos are provided by Logo.dev and remain the trademarks of their owners.

Permissions

Billow asks for permission only when you use a feature that needs it: notifications for reminders, photos or camera to import a receipt, and calendar (write-only) to add a renewal date. You can change these at any time in iOS Settings.

Deleting your data

Delete a subscription in the app to remove it from all your devices. Settings › Data › Delete all data removes everything at once, including connected mailboxes and their stored passwords. You can also delete the app and remove Billow's data under Settings › [your name] › iCloud › Manage Storage.

Children

Billow is not directed at children and does not knowingly collect data from anyone.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions about privacy: ecapi88@gmail.com