A clear inventory of the data DueCue needs.

This notice applies to the DueCue public site, signed-in web application, and Chrome extension. DueCue is operated by Alp.

• Account and authentication data: email address, optional display name, authentication identifiers, and session information managed through Supabase Auth.
• Extension authentication: a scoped, revocable extension session is stored locally after sign-in. Passwords are sent over HTTPS to DueCue for authentication and are not retained by the extension.
• Preferences: timezone, default currency, reminder delivery hour, reminder enablement, reminder offsets, approved page-awareness sites, dismissals, and the local Browser reminders setting.
• Tracked subscription and trial data: merchant, service, plan, amount, currency, billing cadence, renewal or trial dates, status, and optional notes or cancellation information.
• Reminder data: canonical schedules, event type, status, delivery attempts, acknowledgement, and limited operational failure information needed to prevent duplicate delivery and diagnose reliability.
• Chrome extension capture: after a user explicitly chooses Track this page, DueCue inspects bounded visible page evidence locally, intentionally excludes sensitive fields, and shows a structured proposal for review before saving. The confirmed proposal, page URL, and hostname are sent to DueCue to validate context and save or update the record. Raw DOM, full page text, passwords, payment-card or CVV fields, banking credentials, cookies, and private unrelated form values are not uploaded.
• Optional page awareness: Page Awareness runs only on sites the user explicitly approves. It checks limited page signals to decide whether DueCue may be useful, without creating a subscription, saving page contents, or building a browsing-history log. Full extraction still requires Track this page.
• Optional browser reminders: when the user enables Browser reminders, a low-frequency Chrome alarm makes an authenticated request to DueCue for reminders already due. The extension uses chrome.storage.local for the preference and bounded delivery state needed to avoid repeat notifications.
• Temporary extension state: pending email verification stores the email address, state, and timestamp but never the password. Review recovery stores bounded structured capture data for a limited recovery window.
• Technical data: ordinary hosting, request, authentication, security, and service logs needed to operate and protect DueCue.

• Create and secure accounts and scoped extension sessions.
• Process user-requested page capture and synchronize records the user confirms.
• Provide subscription organization, DueMap, estimates, reminder schedules, optional Chrome notifications, history, and cancellation-help workflows.
• Enforce account ownership, suppress duplicate records and notifications, retry eligible failures, and investigate reliability or security problems.
• Maintain the user's chosen Page Awareness sites and local extension preferences.

DueCue uses Supabase for authentication and database services and Vercel for hosting and server processing. These providers process data on DueCue's behalf to operate, secure, and maintain the service. Data may also be disclosed when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

DueCue does not sell user data, use it for advertising, or use it for credit or lending decisions. DueCue does not connect to bank accounts, Gmail, or other inboxes in the current product and does not send account credentials to merchants.

• DueCue does not request or collect Chrome browsing history.
• DueCue does not request access to cookies or continuously monitor ordinary browsing.
• DueCue intentionally excludes passwords, payment-card numbers, CVV values, banking credentials, hidden fields, and private unrelated form content from capture.
• Opening a page does not automatically create or update a subscription.
• Browser-reminder polling contacts only DueCue's backend and does not inspect the active page.
• Signing out clears the local extension session and notification state without deleting records already stored in the DueCue account.

DueCue's use and transfer of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used only to provide or improve DueCue's disclosed subscription and trial tracking purpose, operate and secure that functionality, comply with law, or complete another transfer permitted by that policy. DueCue does not use or transfer extension data for personalized advertising. Human access is limited to cases where the user gives specific consent, access is necessary for security or legal compliance, or appropriately aggregated internal operations permit it.

Account, subscription, trial, reminder, and cancellation data remains available while it is needed to provide the account and its requested history, unless the user deletes the relevant record or account. DueCue also keeps limited security, delivery, and operational records when needed to prevent abuse, suppress duplicate delivery, resolve failures, or meet legal obligations. DueCue does not state fixed retention periods where the current implementation does not enforce one.

Deleting a subscription or account removes it from active product use according to DueCue's deletion workflow. Limited copies may remain temporarily in provider backups, security logs, or records that must be retained for legal or abuse-prevention reasons. Backup copies age out through provider and operational recovery processes; DueCue does not promise immediate erasure from every backup system.

In the product, users can correct or delete tracked subscription data, change reminder preferences, export supported account data, and request or perform account deletion where available. Depending on where a user lives, applicable law may provide additional privacy rights. This notice does not claim that every jurisdiction-specific right applies to every user.

Privacy requests may be sent to duecuesupport@gmail.com. The contact page lists the current monitored channel.

DueCue is a general subscription-management product and is not directed to children. DueCue does not knowingly design or market the service to children or seek children's personal data. A person who is not legally able to agree to the Terms should not create an account without the authorization required where they live. Any jurisdiction-specific age or parental-consent requirement remains subject to applicable law.