Privacy Policy
Last updated: May 14, 2026
About This Policy
CostGuard ("the App", "the Service") is owned and operated by Base Unit LLC, a limited liability company ("we", "us", "our"). This Privacy Policy describes how Base Unit LLC collects, uses, and protects information obtained from users ("you") of the CostGuard mobile application and associated services. By using CostGuard, you agree to the practices described in this Policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name, email address, and optional profile picture. This information is used to authenticate your identity, personalize your experience, and communicate with you about your account.
1.2 Email Access & Inbox Scanning
When you connect an email account (via Google or Microsoft OAuth), we request read-only access solely to identify subscription-related emails such as billing receipts, renewal notices, and payment confirmations. Specifically:
- •We do not store your emails. Inbox contents are scanned in real time and immediately discarded after subscription data is extracted.
- •We do not read personal messages. Our scanning is limited to emails containing billing, subscription, or payment keywords.
- •We do not send emails on your behalf. Read-only access means we cannot compose, send, modify, or delete any messages.
- •We retain only the derived subscription data (service name, billing amount, frequency) — not the raw email content.
1.3 Usage & Analytics Data
We collect anonymized usage data including feature interactions, session duration, crash reports, and device/OS information to improve app performance and user experience. This data cannot be used to identify you personally.
1.4 Payment Information
Pro plan purchases are processed through the Apple App Store or Google Play Store. Base Unit LLC does not collect, process, or store your payment card details. All billing is governed by Apple's and Google's respective privacy policies.
2. How We Use Your Information
Base Unit LLC uses the information collected solely to:
- •Scan your inbox to identify and surface recurring subscriptions
- •Display spending breakdowns, categories, and trends within the App
- •Send push notifications about upcoming subscription renewals
- •Authenticate your account and maintain session security
- •Respond to support requests and communicate service updates
- •Detect and prevent fraud, abuse, or unauthorized access
- •Comply with applicable laws and legal obligations
We do not use your data for advertising, behavioral profiling, or any purpose unrelated to providing the CostGuard service.
We Never Sell Your Data
Base Unit LLC will never sell, rent, lease, or otherwise transfer your personal information or inbox data to third parties for commercial or marketing purposes. Your data exists exclusively to provide you with the CostGuard service.
3. Data Security
We implement industry-standard technical and organizational measures to protect your data:
- •Encryption in Transit & At Rest: All data transmitted between your device and our servers is encrypted using TLS 1.2+. Stored data is encrypted using AES-256.
- •OAuth 2.0: Email accounts are connected via industry-standard OAuth 2.0 protocols. We never see or store your email password.
- •Minimal Data Retention: Raw email content is never persisted. Only derived subscription metadata is retained for as long as your account is active.
- •Access Controls: Internal access to user data is strictly limited on a need-to-know basis.
No method of electronic transmission or storage is 100% secure. While we use commercially reasonable measures, Base Unit LLC cannot guarantee absolute security.
4. Data Retention
We retain your account information and derived subscription data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Aggregated, anonymized analytics data may be retained indefinitely as it cannot identify you.
5. Third-Party Services
CostGuard integrates with the following trusted third-party providers. Each provider's use of your data is governed by their own privacy policies:
- •Google LLC / Microsoft Corporation: OAuth 2.0 authentication for read-only email access. Governed by Google's and Microsoft's respective privacy policies.
- •Apple Inc. / Google Play: In-app purchase processing. Base Unit LLC does not receive your payment card details.
- •Firebase (Google LLC): User authentication, crash reporting, and anonymized analytics.
We do not sell or share personal data with any third parties beyond what is strictly necessary to operate the Service.
6. Children's Privacy
CostGuard is not directed to individuals under the age of 13 (or the applicable minimum age in your jurisdiction). Base Unit LLC does not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we may have collected information from a child, please contact us at support@costguard.app.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- •Access: Request a copy of the personal data we hold about you.
- •Correction: Request correction of inaccurate or incomplete data.
- •Deletion: Request deletion of your account and associated personal data.
- •Portability: Request your data in a structured, machine-readable format.
- •Revoke Email Access: Disconnect any linked email account at any time via Settings → Connected Accounts. This immediately terminates our read-only access.
- •Opt-Out of Communications: Unsubscribe from non-essential emails at any time.
- •Do Not Sell (CCPA): California residents have the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, contact us at support@costguard.app. We will respond within 30 days.
8. International Users
CostGuard is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. Base Unit LLC complies with applicable data protection laws including GDPR to the extent required.
9. Changes to This Policy
Base Unit LLC reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice within the App or by email. The "Last updated" date at the top of this page will reflect the most recent revision. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.
10. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact Base Unit LLC at:
Base Unit LLC