Privacy policy

Last updated 17 October 2026

Qovilio keeps track of what you pay for. To do that, it handles some personal information. This page explains what, why, and what you can do about it.

1. Who we are

Qovilio is a subscription tracker run by Qovilio Technologies Ltd, a company registered in Nigeria (“Qovilio”, “we”, “us”). We decide how the information in this policy is used. Questions go to [email protected].

2. What we collect

Your account. Your name, email address and password (stored only as a one-way hash), or your Google profile if you sign in with Google. Your settings, such as currency, time zone and which emails you want.

Subscriptions and bills. Subscriptions you add by hand, and bills and receipts you upload or forward to your Qovilio address: the file, its text, and what we read from it (company, plan, amount, currency, dates).

A connected Gmail or Outlook inbox, if you connect one. See section 4.

Slack, if you connect it. Your Slack workspace and the channel you choose, plus the access token Slack gives us, so we can post alerts and answer questions there.

Payments. Card payments are handled by our payment provider, Bachs. We never see your full card number. We keep your plan, its dates, and your card’s brand and last four digits so we can remind you before a charge.

Usage and devices. Sign-in times, IP address and browser details, used to keep your account secure and stop abuse. Product analytics (which pages and features are used) only if you accept them in the cookie notice.

Messages to us. Support emails, feedback and replies to our emails.

3. How we use it

To run Qovilio: build your list of subscriptions, totals and analytics, and keep them up to date.
To send what you’ve asked for: reminders before charges, failed-payment alerts, the daily brief, and Slack messages.
To read bills with AI. The text of a bill is sent to OpenAI’s API to pull out the company, amount and dates, and to answer your questions in Ask Qovilio. OpenAI doesn’t use API data to train its models.
To run your account: sign-in codes, password resets, billing, and account emails such as the welcome email.
To keep Qovilio secure and working, and to answer you when you write to us.
To improve Qovilio, using counts and patterns rather than the contents of your bills.

We don’t sell your information, and we don’t use it for advertising.

4. Connected inboxes

If you connect Gmail or Outlook, you give Qovilio read-only access to that mailbox. We use it for one thing: finding your subscriptions and keeping them up to date.

We look at the sender and subject of messages to spot billing emails: receipts, invoices, renewals, trials and failed payments.
We keep only the billing emails: their sender, subject, date, text and attachments. Other emails are not stored.
Billing emails are read by AI as described in section 3, to work out what you pay for.
We never send, delete, move or change your emails.
The access token is stored encrypted and is only used by Qovilio’s own servers.

You can disconnect an inbox at any time in Settings, or remove Qovilio’s access from your Google Account (Security → Your connections to third-party apps) or your Microsoft account (Privacy → Apps and services). Either way, we stop reading it straight away.

5. Google user data

Qovilio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Gmail data is used only to provide and improve Qovilio’s subscription tracking for you. It is not used for advertising, not sold, and not used to develop, improve or train general AI or machine-learning models. No person at Qovilio reads your emails unless you ask us to (for example, to fix a problem), it’s needed for security, or the law requires it.

Microsoft data from a connected Outlook inbox is handled the same way.

7. How long we keep it

We keep your information while you have an account. When you delete your account in Settings, we delete your subscriptions, bills, emails, connected inboxes and account details. Copies in our backups are removed as those backups are replaced. We keep an anonymous note that an account closed (dates, how much it was used, and a reason if you gave one), which doesn’t identify you, and we may keep a record of payments where tax law requires it.

8. Your choices and rights

See and change your subscriptions and settings in the app at any time.
Download your subscriptions as a CSV file from Settings.
Choose which emails and Slack messages we send you.
Disconnect an inbox or Slack, or delete your account, in Settings.
Accept or decline analytics in the cookie notice.

Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, to delete it, or to object to how we use it. Email [email protected] and we’ll reply within 30 days. You can also complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.

9. Security

Everything travels over encrypted connections. Inbox and Slack access tokens are encrypted when stored, passwords are hashed, and only the people who run Qovilio can reach its servers. No system is perfectly secure, so if something goes wrong that affects your data, we’ll tell you.

10. Where your data goes

Some of the services we use are based in other countries, including the United States. When your information goes to them, we rely on their contracts and safeguards to protect it.

11. Children

Qovilio isn’t for anyone under 16, and we don’t knowingly collect information from them.

12. Changes to this policy

If we change this policy in a way that matters, we’ll email you before the change takes effect. The date at the top shows when it last changed.