Privacy Policy

1. Data Controller

• Controller: BEAST LABS, SLU
• Registered Address: Avinguda Verge de Canòlich, núm. 124, 1r pis, 2a porta, despatx 12, Edifici La Freixera, Sant Julià de Lòria, AD600, Andorra
• Email: contact@beast-labs.com

2. Information We Collect

2.1 Information you enter in the App (subscription data)

DueCue is designed so that the subscription information you enter (for example: subscription names, amounts, renewal/due dates, categories, notes, and reminder preferences) is stored on your device.

If you enable iCloud Sync in the App (where available) and are signed in to iCloud, this data may be synced via Apple iCloud/CloudKit to your iCloud account to keep your data available across your devices.

2.2 Purchases (Pro Lifetime)

DueCue may offer a non-consumable "lifetime" in-app purchase to unlock Pro features ("Pro Lifetime"). Payments are processed by Apple via In‑App Purchase. We do not receive or store your full payment card details.

To verify purchase status and unlock Pro features, we use RevenueCat, which processes limited purchase-related and technical information (for example: product identifiers, entitlement status, receipts or receipt-derived data, app user identifiers, device and network information as needed for fraud prevention and purchase validation).

We also use Superwall to present paywalls and purchase offers inside the App. Superwall may process limited technical and interaction data (for example, app/user identifiers, entitlement status, paywall presentation events, and paywall interaction events) to operate paywalls and measure paywall performance.

2.3 Analytics and marketing measurement (Meta/Facebook SDK) and Tracking (ATT)

The App includes the Meta/Facebook SDK (FBSDKCoreKit). We use it to measure marketing performance and improve acquisition (for example, understanding whether an install or purchase resulted from an ad campaign).

When required, we request permission using Apple's AppTrackingTransparency framework.

• If you allow tracking: the Meta/Facebook SDK may process identifiers such as the device advertising identifier (IDFA) and related device/network information, and we may log certain in-app events (for example, onboarding completion, paywall checkout initiation, and purchase events) for measurement and attribution.
• If you deny tracking: we disable advertiser identifier collection and auto-logging of app events for tracking purposes, and we do not intentionally log those marketing events. The SDK may still process limited device/network information necessary to operate (for example, to support deferred deep linking or basic SDK functionality), subject to Meta's policies.

2.4 Support communications (in-app contact form)

If you contact us through the in-app contact form, we collect:

• Your email address
• The content of your message
• The type of inquiry (e.g., support, feedback, bug report, feature request, other)

This information is sent to our support endpoint (hosted under beast-labs.com) so we can respond.

Support submissions may be processed by infrastructure/service providers acting on our behalf solely to deliver, secure, and maintain support communications.

2.5 Notifications

DueCue can schedule reminders (for example, upcoming renewals and trial-ending reminders) using local notifications on your device. These reminders are created and delivered on-device and do not require us to receive your subscription data.

2.6 Diagnostics

We do not integrate a third-party crash reporting SDK in the App. Apple may provide aggregated or device-level diagnostic information to developers depending on your device settings and Apple's policies.

3. How We Use Information

We use information to:

• Provide and operate the App's features (subscription tracking, reminders, Pro access)
• Sync your data across devices if iCloud Sync is enabled
• Validate purchases and manage entitlements
• Provide customer support and respond to requests
• Measure marketing performance and improve the App (where permitted and/or with your consent)
• Maintain security, prevent fraud, and comply with legal obligations

4. Legal Bases (EEA/UK users)

Depending on your location and the context, we rely on:

• Performance of a contract (to provide App functionality and Pro features)
• Legitimate interests (security, fraud prevention, service improvement)
• Consent (where required, such as tracking permission and notifications permission)

5. Sharing & Third Parties

We do not sell your personal data. We share information only as needed to provide the App:

• Apple (App Store / In‑App Purchase; iCloud/CloudKit if enabled)
• RevenueCat (purchase validation and entitlement management)
• Meta Platforms (Facebook SDK) (marketing measurement and attribution, subject to your ATT choice)
• Superwall (paywall presentation, purchase-flow orchestration, and paywall performance analytics)
• Frankfurter API (exchange-rate retrieval used for currency conversion features; when rates are requested, request metadata such as IP address may be processed by that service)
• Service providers we use to operate our support endpoint and communications (as needed to provide support)

6. Data Retention

• App data you enter: stored on your device, and if iCloud Sync is enabled, in your iCloud account, until you delete it.
• Support communications: retained only as long as needed to address your request and for reasonable record-keeping, then deleted or anonymized.
• Purchase validation data: retained as needed to maintain Pro access and prevent fraud.
• Marketing/attribution data (Meta): retention is governed by Meta's data retention policies; we do not separately retain this data on our servers.
• Paywall interaction and attribution data (Superwall): retained according to Superwall's retention policies; we do not separately store full raw Superwall event logs on our own servers unless required for operational troubleshooting.
• Exchange-rate data: exchange rates are cached on-device for up to 7 days and then refreshed or replaced.

7. Your Choices and Controls

• Tracking: You can allow/deny tracking when prompted, or change it later in iOS Settings > Privacy & Security > Tracking.
• Ad Measurement Opt-Out: You can opt out of marketing measurement at any time by going to iPhone Settings > Apps > DueCue and deselecting "Allow Tracking".
• Notifications: You can enable/disable notifications in iOS Settings > Notifications.
• iCloud Sync: You can enable/disable iCloud Sync within the App (where available) and manage iCloud storage in your Apple ID iCloud settings.
• Data deletion: You can delete your local App data by removing the App from your device. If iCloud Sync is enabled, you can also remove DueCue data from iCloud storage management for your Apple ID.

8. International Transfers

Some providers may process data outside your country. Where required, we use appropriate safeguards (such as contractual protections) to protect your information.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or object to processing of your personal data, and to withdraw consent where processing is based on consent.

EEA/UK users: You also have the right to lodge a complaint with a supervisory authority in the EU/EEA member state or the UK where you reside or work, or where the alleged infringement occurred.

GDPR Article 27 Representative: As we are established in Andorra (outside the EU/EEA), we are not required to appoint a representative under GDPR Article 27 at this time. If this changes, we will update this policy accordingly.

To exercise your rights, contact: contact@beast-labs.com

10. Children

The App is not intended for children under 13. We do not knowingly collect personal data from children under 13.

11. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of "sales" or "sharing" of personal information.

We do not sell personal information as defined by the CCPA/CPRA. Marketing measurement data processed via the Meta/Facebook SDK may constitute "sharing" for cross-context behavioral advertising under CPRA; you can opt out via the App Tracking Transparency prompt or in iOS Settings.

To exercise your California privacy rights, contact: contact@beast-labs.com

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post updates on this page and revise the "Last updated" date.

13. Contact

If you have questions about this Privacy Policy, contact us at contact@beast-labs.com.