Worth Privacy Policy
This policy explains how CoreLabs processes information in Worth: Subscription Tracker on Android and iOS. Worth is designed as a local-first subscription organizer. Core tracking does not require an account or a bank connection.
Information you add
Worth may store subscription names, prices, currencies, billing cycles and dates, categories, notes, reminders, usage history, cancellation progress, lists, price history and confirmed payments or savings. This information is stored in Worth’s private app storage. On Android, primary state is additionally encrypted with a key held by Android Keystore. On iOS, Worth relies on the app sandbox and Apple device data-protection controls; the current iOS version does not upload this state to CoreLabs.
Imports, OCR and files
You choose any receipt, image, PDF, CSV or backup file that Worth opens. Android uses on-device Google ML Kit recognition. iOS uses Apple Vision and PDFKit on device. Worth does not upload the selected document or recognized text to a CoreLabs server. You must review recognized fields before saving. Files exported outside Worth are controlled by you and the storage provider or location you select.
Notifications
If you grant notification permission, Worth schedules local renewal and trial reminders. Notification content may include the subscription name, date and amount you entered. You can disable reminders in Worth or revoke notification permission in system settings.
Purchases
Google Play Billing on Android and Apple StoreKit on iOS provide product information and purchase status for Plus and Pro. Worth does not receive or store payment-card details. The applicable store processes purchases, renewals, cancellations and refunds under its terms and applicable law.
Platform-specific optional features
On Android only, if you separately grant Usage Access, Worth may read supported app package names, foreground duration, launch counts and active dates for local usage analysis. It does not read app content, messages, entered text or browsing history. Android also offers optional Google sign-in, Firebase sync and family spaces; if you enable them, Firebase Authentication processes your account identity and Firestore stores the state you choose to sync. These account, cloud-sync, family-space and Usage Access features are not present in the current iOS version.
Catalog, analytics and diagnostics
On Android, Firebase Remote Config may deliver non-personal catalog reference data. Starting with Android version 3.3.20, Firebase Analytics measures installation and a limited, predefined product funnel: onboarding completion, adding a subscription, reaching three subscriptions, configuring reminders, opening the paywall, launching checkout and confirming a purchase. Worth does not send subscription names, prices, currencies, notes, receipt content, email addresses, purchase tokens or payment-card details to Analytics. Google may process app interactions and limited app, device, installation and diagnostic identifiers under its terms. Worth disables Android Advertising ID collection and personalized-ad signals and does not include advertising or Crashlytics. The current iOS version has no CoreLabs analytics or advertising SDK and does not send subscription records to CoreLabs.
Biometric lock
Android’s optional lock uses the system BiometricPrompt or device credential. Android performs the match and Worth receives only the result. The current iOS version does not offer a biometric lock.
Retention and deletion
Local data remains until you delete it in Worth, clear app storage or uninstall. On Android, a separate confirmed action deletes a signed-in personal Firestore copy; signing out alone does not delete remote data. The applicable app store retains purchase records under your store account. Exported files remain wherever you saved them.
Security
Worth uses platform app isolation and transport security. Android additionally encrypts primary local state and entitlement caches with Android Keystore and disables cleartext network traffic. No system can guarantee absolute security; keep your device and store or Google account protected.
Children and international processing
Worth is a general-audience finance utility and is not directed to children. CoreLabs does not knowingly design Worth to collect children’s personal information. Apple, Google and Firebase may process store, account or diagnostic data in other countries under their infrastructure and contractual safeguards. Local law may provide additional rights.
Your choices and rights
You can use core tracking without an account, decline notifications, avoid optional imports or Android cloud features, edit or delete subscriptions, export data and delete local data. Android Analytics data is retained and deleted according to the configured Google Analytics retention controls and applicable law. For a verified privacy or deletion request, contact CoreLabs below.
Changes
We may update this policy when Worth, service providers or legal requirements change. The updated date will change and material changes will be communicated where required.
Contact
Developer: CoreLabs. Email worth@corelabs.app or use the Worth support page.