Privacy Policy

Last updated: 8 October 2026

1. What data Cancly stores

Cancly stores the subscriptions, profiles, amounts, notes and settings that you enter. All of this is kept in local application storage on your own device. Cancly does not upload, sync, or back this data up to any server.

2. What the app sends

The desktop app sends one anonymous event the first time it runs after installation, so we can count installs. It carries no personal or subscription data — only a random per-install identifier (never a hardware id), the app version and your operating system. Person profiles and location lookup are disabled, and it goes to PostHog's EU servers. It is never linked to you or to what you track.

3. Optional network activity

Two features reach the internet and can be turned off in Settings: downloading service logos (via DuckDuckGo's icon service) and refreshing currency exchange rates (via open.er-api.com). Neither transmits your subscriptions — only a service domain or a rate request. Clicking a "how to cancel" link opens that service's website in your browser. Your subscription data itself is never sent anywhere.

Add from your phone (local network only). While you have the “Add from your phone” window open, the app serves a small page on your own Wi‑Fi network so a phone that scans its QR code can send a new subscription to this computer. It is reachable only on your local network, only with the secret in that QR code, and it can only add a subscription — it cannot read or change anything. It stops when you close the window. Nothing about it goes through the internet or to us.

4. Third parties

The app's anonymous install event is processed by PostHog (EU region). The optional lookups above reach DuckDuckGo and open.er-api.com. None of these receive your subscriptions, amounts, notes or any personal information.

5. This website

This website (cancly.com) uses PostHog analytics (EU-hosted) to measure visits, page views and download-button clicks so we can understand traffic and improve the page. It also loads a Meta (Facebook) pixel, which initializes only when a campaign link with a ?pixel= parameter is used and fires a "Lead" event on a download click; on an ordinary visit no pixel is initialized. These are website analytics, separate from the desktop app.

6. Your control

Because your data lives only on your device, you are always in full control: export it to a file at any time from Settings, or remove it by uninstalling the app.

7. Contact

Questions about this policy? Reach out via the project page. This policy may be updated; the date above reflects the latest revision.