Privacy Policy
Last updated: 11 August 2026
Our commitment: Your privacy is fundamental to how we operate. We collect only what's necessary, protect it rigorously, and never sell your data. This policy explains exactly what we do with your information.
1 Information We Collect
Account Information
When you create a PayDay account, we collect:
- Email address: For account login, communications, and password recovery
- Name: To personalise your experience and communications
- Phone number (optional): For two-factor authentication and important alerts
- Password: Stored in encrypted form; we never store or see your actual password
Financial Information
To provide our pay-splitting service, we access:
- Bank account details: Account numbers and names of your connected accounts
- Transaction history: To detect pay deposits and track splits
- Account balances: To display in the app and ensure sufficient funds for transfers
Important: We never store your bank login credentials. All bank connections are handled securely by Akahu, our open banking partner. See Section 4 for details.
Device & Usage Information
We automatically collect:
- Device information: Device type, operating system, and app version
- Usage data: Features used, session duration, and interaction patterns
- Log data: Error reports and performance metrics
- IP address: For security monitoring and fraud prevention
2 How We Use Your Information
Primary Service Functions
- Detecting when your pay arrives in your connected accounts
- Automatically splitting your pay according to your configured rules
- Initiating transfers between your connected accounts
- Sending notifications about pay detection and completed splits
- Displaying your account balances and transaction history
Account Management
- Authenticating your identity and securing your account
- Processing subscription payments (for Pro users)
- Responding to your support requests
- Sending important service updates and security alerts
Service Improvement
- Analysing usage patterns to improve features and user experience
- Identifying and fixing bugs or performance issues
- Developing new features based on user needs
- Conducting research to improve our pay detection accuracy
Legal & Security
- Complying with New Zealand legal obligations
- Detecting and preventing fraud or security threats
- Enforcing our Terms of Service
- Responding to legal requests from authorities
3 Data Sharing & Third Parties
We never sell your personal data.
Your information is not sold, rented, or traded to third parties for their marketing purposes.
Service Providers We Work With
We share data only as necessary with these categories of providers:
Akahu (Open Banking Provider)
Handles secure bank connections and transaction data retrieval. See Section 4 for detailed information.
Supabase (Hosting, Database & Authentication)
Hosts our application, database, and account authentication. Your data is stored in Supabase's Sydney, Australia region.
OpenAI (Payy Assistant)
Powers the Payy assistant. When you chat with Payy, your message and relevant context (such as account names and balances) are sent to OpenAI to generate a reply. OpenAI does not use this data to train its models. Processed internationally.
Resend (Transactional Email)
Sends transactional emails such as split confirmations and bank reconnect reminders. Processed overseas.
Stripe (Payments)
Processes subscription payments if you upgrade to a paid plan. We never store your card details.
Overseas storage: Some of these providers are based in Australia (Supabase) or internationally (OpenAI, Resend, Stripe), so your information may be stored or processed outside New Zealand. We only work with providers that apply comparable privacy safeguards.
Legal Disclosures
We may disclose information when required by law or to:
- Comply with valid legal processes (court orders, subpoenas)
- Protect the rights, property, or safety of PayDay, our users, or the public
- Detect, prevent, or address fraud, security, or technical issues
- Respond to emergency situations involving potential threats to safety
4 Akahu Integration
PayDay uses Akahu, New Zealand's leading open banking platform, to securely connect to your bank accounts. This section explains how this integration works and what data is shared.
How Akahu Works
- When you connect a bank, you log in directly through Akahu's secure portal
- Your bank credentials are entered on Akahu's website, never on PayDay
- Akahu establishes a secure connection with your bank
- PayDay receives only the data you authorise (transactions, balances, account details)
Data Akahu Shares With PayDay
- Account names and numbers
- Account balances
- Transaction history (deposits, withdrawals, transfers)
- Transaction metadata (dates, references, counterparty names)
What Akahu Does NOT Share
- Your bank login username
- Your bank login password
- Your bank's two-factor authentication codes
Learn more: For detailed information about Akahu's security practices, visit our Akahu partnership page or Akahu's security page.
5 Data Storage & Security
Where Your Data Is Stored
- Your core account and financial data is stored with Supabase in its Sydney, Australia region
- Some providers that help run PayDay, such as OpenAI and Resend, are based internationally, so limited data may be processed outside Australia and New Zealand
- All data is encrypted in transit and at rest, wherever it is stored
How We Protect Your Data
- Encryption in transit: All data transmitted uses TLS 1.3 encryption
- Encryption at rest: All stored data is encrypted using AES-256
- Access controls: Strict role-based access limits who can view data
- Monitoring: 24/7 security monitoring for suspicious activity
- Regulated connections: Bank access via Akahu, an accredited requestor under the Customer and Product Data Act 2025
Data Retention
- Active accounts: Data retained while your account is active
- Transaction history: Kept for 7 years for legal/tax compliance
- Closed accounts: Personal data deleted within 30 days of account closure, except where retention is legally required
- Backups: Cycled and deleted according to our retention schedule
6 Your Rights
Under New Zealand's Privacy Act 2020, you have important rights regarding your personal information:
Right to Access
You can request a copy of all personal information we hold about you. We'll respond within 20 working days.
Right to Correction
You can request correction of any inaccurate personal information. Most details can be updated directly in the app.
Right to Deletion
You can request deletion of your account and personal data, subject to legal retention requirements.
Right to Data Portability
You can request an export of your data in a machine-readable format.
Right to Withdraw Consent
You can revoke bank connection permissions at any time through the app or directly through Akahu.
To exercise any of these rights, email hello@payday.nz or use the in-app settings.
7 NZ Privacy Act Compliance
PayDay is committed to full compliance with the New Zealand Privacy Act 2020. Here's how we meet our obligations:
Information Privacy Principles
- Purpose of collection: We only collect information necessary for providing our services
- Source of information: Personal information is collected directly from you or through Akahu with your consent
- Collection from subject: Where possible, we collect information directly from you
- Storage and security: We take reasonable steps to protect against loss, misuse, and unauthorised access
- Access and correction: You can access and correct your information as detailed in Section 6
- Accuracy: We take steps to ensure information is accurate, complete, and up-to-date
- Retention: We don't keep information longer than necessary
- Limits on use: We only use information for the purposes it was collected
- Limits on disclosure: We only disclose information as outlined in this policy
- Unique identifiers: We don't assign unique identifiers unless necessary for our functions
Privacy Officer
Our Privacy Officer oversees compliance with this policy and the Privacy Act. Contact:
Privacy Officer
PAYDAY LIMITED
Email: hello@payday.nz
Complaints
If you believe we've breached your privacy, please contact us first. If you're not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner:
Office of the Privacy Commissioner
Website: privacy.org.nz
Phone: 0800 803 909
9 Policy Changes
We may update this Privacy Policy from time to time. When we make changes:
- We'll update the "Last updated" date at the top of this page
- For significant changes, we'll notify you via email or in-app notification
- We'll provide a summary of what's changed
- Continued use of PayDay after changes constitutes acceptance of the updated policy
We encourage you to review this policy periodically. Previous versions are available upon request.
10 Contact Us
If you have questions about this Privacy Policy or how we handle your information, please get in touch: