We built JebSave to help you save money — not to collect more data than we need. This page explains exactly what we access, why we need it, and how we keep it safe. No legalese, just plain language.
Last Updated: April 3, 2025 · Effective: April 3, 2025🇮🇳 This Privacy Policy is written for Indian users and is compliant with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and Google's API Services User Data Policy. Our servers and your data stay in India.
JebSave is a subscription tracking app built for Indians. We help you figure out what you're paying for every month — automatically or manually — so you can cancel what you don't use and keep more money in your pocket.
When this policy says "JebSave", "we", "us", or "our", it means the JebSave app and the team behind it. When it says "you" or "your", it means you — the person using the app.
By downloading or using JebSave, you agree to this Privacy Policy. If any part of it isn't okay with you, please reach out at privacy@jebsave.in — we're happy to answer questions before you decide.
JebSave gives you four different ways to track your subscriptions. You're in control — use whichever method works best for you. You can mix and match, or stick to just one. Each is explained in full detail in the sections below.
JebSave reads transaction SMS from your Indian banks and payment apps to automatically find recurring payments. The fastest way to get started — works with all major Indian banks and UPI apps.
Connect your Gmail and JebSave will scan billing and subscription-related emails to catch subscriptions your bank SMS might have missed — especially useful for international services.
Upload your last 3 months of bank statements as a PDF or CSV. We scan for recurring transactions, extract the subscription data, and then permanently delete your file within 24 hours.
Don't want to connect anything? Simply type in your subscriptions yourself — name, amount, billing date. No permissions needed, full control, always available.
You can enable, disable, or revoke any detection method from Settings in the app at any time.
This is JebSave's primary auto-detection method on Android. Here is exactly how it works and what we do — and don't do — with your messages.
We request the READ_SMS permission on Android. This lets JebSave read SMS messages on your device. iOS doesn't allow third-party apps to read SMS at the system level, so iPhone users rely on Gmail, bank statement upload, or manual entry instead.
We do not read all your messages. Our app runs a filter on your inbox that only processes messages from known Indian financial sender IDs — things like HDFCBK, SBIINB, ICICIB, PAYTM, PHONEPE, GPAY, and similar verified bank and UPI sender names. Messages from your contacts, personal numbers, or any non-financial source are never read, processed, or touched.
From qualifying financial SMS, we extract four things only: the merchant or service name, the amount charged, the date of the transaction, and the payment source (which bank or UPI app). Nothing else.
⚠️ The full text of your SMS messages never leaves your phone. All reading and filtering runs entirely on your device. Only the four extracted data points (merchant, amount, date, payment source) are sent to our servers — the original SMS content is never transmitted.
We declare the READ_SMS permission in our Play Store listing with a clear explanation of its purpose. We use this permission only to detect subscriptions and recurring payments — for no other purpose. This complies with Google Play's Sensitive App Permissions policy, the Restricted Permissions guidelines, and the requirement to declare the core functionality of SMS access in the app's Data Safety section.
Go to Settings → Apps → JebSave → Permissions → SMS → turn it off. Subscriptions we've already found will stay in your app. New ones won't be auto-detected from SMS. You can switch to Gmail, bank statement upload, or manual entry instead.
This is completely optional. We added it because many subscriptions — especially to international services like Netflix, Spotify, Adobe, or Notion — don't always generate an Indian bank SMS. They often only send an email receipt. Gmail scanning catches those.
We use Google's official OAuth 2.0 sign-in flow. When you tap "Connect Gmail", Google's own consent screen appears and lists exactly what JebSave is asking to access. You review it, and then approve or cancel. We never see your Google password — Google handles login and gives us a limited, scoped access token. You stay in control throughout.
We only request the minimum permission needed to find billing emails. Here's a plain-English breakdown of what that access allows and what it doesn't:
| What We Can Do | Allowed? |
|---|---|
| Search for emails matching billing and subscription keywords | Yes |
| Read the content of emails that match our subscription filter | Yes |
| Extract merchant name, amount, and billing date from matching emails | Yes |
| Read personal emails, social emails, or promotional emails unrelated to billing | No |
| Send emails on your behalf | No |
| Delete or modify your emails | No |
| Access Google Drive, Contacts, Calendar, or any other Google service | No |
| Store, share, or sell your email content | No |
| Use email data for advertising or profiling | No |
We search for emails matching patterns like: known subscription service sender domains (Netflix, Spotify, Amazon Prime, Apple, Google, Adobe, etc.), subject lines containing words like "invoice", "receipt", "subscription renewal", "payment confirmation", "your order", "billing statement", and similar. Emails that don't match these patterns are never opened or read.
Same as SMS — we pull the service name, amount, and billing date. The email body itself is never stored on our servers. We extract the structured subscription data we need and discard everything else.
✅ JebSave's use of Gmail data strictly complies with Google's API Services User Data Policy, including the Limited Use requirements. Your Gmail data is used only to detect subscriptions and is never used for advertising, profiling, or shared with third parties for any secondary purpose.
Go to JebSave Settings → Connected Accounts → Gmail → Disconnect. You can also revoke access directly from your Google Account at myaccount.google.com/permissions. Disconnecting removes our access token immediately — we can no longer read any of your emails after that point.
This is another optional method. It's useful if you want a complete picture of your subscriptions without connecting any live account or granting any ongoing permissions. You download a statement from your bank yourself, upload it to JebSave, and we do the rest.
We accept PDF bank statements and CSV transaction exports from most Indian banks and credit card issuers. You can usually download these from your bank's net banking portal or mobile app. We recommend uploading at least 3 months of statements — this gives us enough history to detect recurring transactions accurately, including quarterly or annual subscriptions.
After you upload a file, our system processes it to look for recurring transactions — payments to the same merchant that appear at regular intervals. Once processing is complete, your uploaded file is permanently and irreversibly deleted from our servers within 24 hours. We do not store your bank statement. We do not archive it. It's gone.
⚠️ Your bank statement contains a lot more information than just subscriptions — your salary, one-time purchases, ATM withdrawals, and so on. We only extract data about recurring payments. Everything else is ignored and discarded along with the file.
Your file travels over an encrypted HTTPS connection when you upload it. On our end, it's stored in an isolated, access-controlled environment during processing. No human at JebSave reads your bank statement — the extraction is entirely automated. The file is deleted immediately after processing is confirmed.
Only the recurring subscription data we've extracted: merchant name, amount, and billing frequency. Everything else from your statement — including your account number, balance, and non-subscription transactions — is neither stored nor transmitted further.
Sometimes the simplest option is the best one. If you'd rather not connect any account or upload any file, you can just type your subscriptions directly into JebSave. Name, amount, renewal date — done.
Manual entry doesn't require any permissions. It works on both Android and iOS without any setup. It's also the right choice for subscriptions that don't generate a bank transaction record — like a yearly magazine subscription you pay for in cash, or a family plan managed by someone else.
You own everything you type in. You can edit or delete any manually-entered subscription from the app at any time, no questions asked.
Besides the subscription data described above, here's everything else JebSave collects:
Your Indian mobile number (+91) is required to create an account. We verify it with a one-time OTP. You don't need to give us your name, email address, or any other personal detail to use the core features of the app.
We collect anonymised data about how people use the app — which features get tapped, how long sessions last, where people stop using the app. This helps us understand what's working and what to improve. This data is not linked to your identity or your financial information.
If the app crashes, we automatically get a technical report telling us what went wrong. This may include your device model and Android/iOS version. It doesn't contain personal data or financial information.
Everything we collect exists to serve one purpose: helping you track and manage your subscriptions. Specifically, we use your data to:
We want to be completely transparent here:
We use a small number of trusted services to run JebSave. Here's who they are and exactly what they do with your data:
Every third-party provider we work with is under a written obligation to handle any data they receive securely and only for the purpose we've specified. They cannot use your data for their own purposes.
We take security seriously — your financial data deserves real protection, not just reassuring words. Here's what we actually do:
📌 No security system is perfect. In the unlikely event of a breach that affects your personal data, we will notify you and relevant authorities promptly as required under the DPDP Act 2023.
To delete your account, go to Settings → Account → Delete Account in the app. Or email us at privacy@jebsave.in and we'll process the deletion within 30 days.
India's Digital Personal Data Protection Act 2023 gives you specific rights over your personal data. Here's what you can ask us for, explained plainly:
To exercise any of these rights, email privacy@jebsave.in. We'll acknowledge your request within 72 hours and act on it within the timeframes required under the DPDP Act 2023.
JebSave is designed for adults — specifically people who have their own bank accounts, credit cards, and subscriptions. You must be at least 18 years old to create an account and use the app.
We don't knowingly collect personal data from anyone under 18. If you're a parent and believe your child has created a JebSave account, please contact us at privacy@jebsave.in right away. We'll delete the account and all associated data immediately after verifying the situation.
We'll update this page whenever our practices change, and we'll always update the date at the top. If the changes are significant — like if we add a new type of data collection or start working with a new third party — we'll notify you through the app and give you at least 14 days before those changes kick in.
If you keep using JebSave after those 14 days, we take that as your acceptance of the updated policy. If you're not comfortable with any change, you can delete your account before the new terms take effect.
Got a question about this policy? Want to exercise one of your data rights? Not happy with how we've handled something? Please reach out — we genuinely want to hear from you and we'll get back to you as soon as we can.
Privacy & Data Concerns: privacy@jebsave.in
General Support: support@jebsave.in
Response Time: Acknowledgement within 72 hours. Full resolution within timelines set by DPDP Act 2023.
In-App: Settings → Help & Support → Privacy Concern
If you are not satisfied with our resolution, you may escalate your complaint to the Data Protection Board of India, once constituted under the DPDP Act 2023.