Privacy Policy

1 Information We Collect

Account Information

When you create a PayDay account, we collect:

• Email address: For account login, communications, and password recovery
• Name: To personalise your experience and communications
• Password: Stored by our authentication provider in hashed form; we never see your actual password
• Two-factor authentication: If you set up an authenticator app, our authentication provider stores what it needs to check your codes
• Google or Apple sign-in: If you sign in this way, we receive your name and email address from Google or Apple
• Profile photo: If you upload one, it is stored with our database provider and shown in the app

Information From Your Bank, Through Akahu

When you connect a bank, and for as long as it stays connected, PayDay receives:

• Account details: Account names, types and numbers of the accounts you connect
• Account holder names: The name or names on each connected account
• Account balances: To show in the app and to check there is enough money before a split
• Transactions: Read to detect your pay, to let you pick a payment to split yourself, and to work out the figures on the Insights tab (see Section 2). PayDay does not keep a copy of your transactions, apart from the payer names it uses to recognise your pay, a running figure for your usual pay amount, and the pay deposits recorded in your split history
• Account status: Whether each account is still refreshing, so we can tell you when to reconnect

Information You Set Up in PayDay

• Pay sources: Their names, the accounts your pay lands in, and the payer names that identify your pay. When you add a pay source, the app suggests the payer name as its name, and you can change it
• Split rules: Their names, amounts or percentages, and the accounts they pay into
• Payment consent details: The account payments come from, the accounts you approved PayDay to pay into, and the per-payment and daily limits you approved at your bank
• Split history: Each payment PayDay made for you, with its amount, accounts, split name, status and time, and the amount and Akahu reference of the pay that triggered it
• Insights choices: Which accounts the Insights tab includes, whether each is a day-to-day or set-aside account, the period, whether to compare it with the one before, the pay source the period follows, the view, and how moves between your accounts show. They are saved on your PayDay account so they follow you between devices. They are settings, never balances or transactions, and they are included when you export your data
• Payy permission: Whether you have allowed Payy to send information to Anthropic, and when you allowed it

Subscription and billing information

If you start a free trial or subscribe, we keep:

• Your plan: Plus or Pro, monthly or annual, its status, and its trial, renewal and end dates
• Payment references: Your customer reference with Stripe if you subscribe through our website, or your purchase reference with Apple if you subscribe in the iOS app
• Trial and free periods: Whether you have used your free trial, and any free period you have been given
• Payment outcomes: Whether payments, refunds and disputes went through

Stripe or Apple collect your payment details, such as your card, directly. We never see or store your full card number.

Device & Usage Information

We collect:

• Error reports: When the app hits an error, a report with your device type, operating system, app version and what happened just before it
• Security logs: Sign-in, bank connection and payment events, with the IP address and device they came from, for security monitoring and fraud prevention
• Website visits: Our website uses Google Analytics to measure visits, and the Meta pixel to measure visits from our Meta ads and whether a visitor joins the waitlist (see Section 8)

2 How We Use Your Information

Primary Service Functions

• Detecting when your pay arrives in your connected accounts
• Working out your splits according to the rules you set
• Instructing Akahu to make payments between your own connected accounts, within the payment consent you approved
• Sending notifications and emails about completed splits and bank connections that need attention
• Displaying your account balances and recent transactions
• Showing your Insights. When you open the Insights tab, PayDay reads every page of your transactions from the last 90 days for the accounts you have not hidden (up to about 1,000 transactions an account). Pulling down to refresh the tab first asks Akahu to get the latest from your bank. PayDay uses your transactions and balances to show what is left to spend before your next pay (an estimate, from your day-to-day accounts), where your money goes by category and by merchant, using the merchant names, categories and logos Akahu adds to transactions, and the bills likely before your next pay (an estimate). It also estimates the loose change you would have saved by rounding each card purchase in the last 30 days up to the next dollar, leaving out payments, bills, moves between your own accounts and buy-now-pay-later instalments. Beside these it shows how each of your pays was split and how your splits are tracking against their targets, from PayDay's own record of the payments it made. PayDay works these figures out in the app and does not store them, nothing from the Insights tab is kept on your phone, and the figures are not sent to Payy. The app loads merchant logos from Akahu's image service when a merchant is shown
• Remembering your Insights choices, such as which accounts and which period to show, on your PayDay account so they are the same on each device
• Answering your questions in Payy, the in-app assistant, if you choose to use it. Payy asks for your permission when you first open it, and nothing is sent to Anthropic until you allow it

Account Management

• Authenticating your identity and securing your account
• Running your subscription: your free trial, your plan and its limits, payments through Stripe or Apple, and billing emails
• Responding to your support requests
• Sending important service updates and security alerts

Keeping PayDay Working

• Using error reports to find and fix bugs
• Alerting our team when a payment fails or needs checking

Legal & Security

• Complying with New Zealand legal obligations
• Detecting and preventing fraud or security threats
• Enforcing our Terms of Service
• Responding to legal requests from authorities

3 Data Sharing & Third Parties

Service Providers We Work With

We share data only as necessary with these providers:

Legal Disclosures

We may disclose information when required by law or to:

• Comply with valid legal processes (court orders, subpoenas)
• Protect the rights, property, or safety of PayDay, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to emergency situations involving potential threats to safety

4 Akahu

Akahu is New Zealand's open finance platform. PayDay uses Akahu to connect to your bank, read your account data, and make the payments you have approved between your own accounts. Akahu is a separate company and handles your data under its own privacy notice, which you can find at akahu.nz.

How Connecting Works

• You start the connection in PayDay and go through Akahu's connection flow
• At ANZ, ASB, BNZ, Kiwibank, NZHL and Westpac, all part of New Zealand's regulated open banking system, you approve access on their own screen
• Your bank login details are never entered into PayDay
• PayDay receives only the data covered by the access you approve

Data Akahu Shares With PayDay

• Account names, types and numbers
• Account holder names
• Account balances
• Transactions (dates, amounts, descriptions, references and other party names, and the merchant name, category and logo Akahu adds when it recognises a merchant)
• Account status and whether an account can make or receive payments
• The status of each payment PayDay asks Akahu to make, including the reason if a bank declines it

Data PayDay Sends to Akahu

• When you set up payments: the account payments come from, the accounts you approve PayDay to pay into, and the per-payment and daily limits. You approve this payment consent at your bank
• For each payment: the account it comes from, the destination account number and payee name, the amount, and the particulars, code and reference that appear on your statement
• When you disconnect: a request to end PayDay's access

Payments Made Through Akahu

• PayDay makes payments only between your own accounts at ANZ, ASB, BNZ, Kiwibank, NZHL and Westpac
• Payments run under an enduring payment consent that you create at your bank. Each payment must stay within the limits you approved
• PayDay cannot pay an account that is not in your payment consent
• You can cancel the payment consent at any time by disconnecting your bank in the app, under Profile, or at my.akahu.nz

What Akahu Does NOT Share

• Your bank login username
• Your bank login password
• Your bank's two-factor authentication codes

5 Data Storage & Security

Where Your Data Is Stored

• Your account and financial data is stored with Supabase in its Sydney, Australia region
• Some providers that help run PayDay are based overseas, so limited data may be processed outside Australia and New Zealand (see Section 3)
• Data is encrypted in transit and at rest, wherever it is stored

What We Keep on Your Device

• What we keep on your device: So the app opens straight onto your accounts, PayDay keeps a copy of your account names, banks and account types, your pay sources and splits, and your recent split history on your phone, encrypted by the phone's own secure storage (the iOS Keychain or the Android Keystore). It never keeps your balances; they are always read live. The web app keeps nothing.
• Retention and deletion: It is replaced each time the app reads your bank, and deleted when you sign out, when someone else signs in on the phone, when you disconnect your bank or PayDay loses access to it, when two-factor is required again, when you delete your account, and the first time a fresh install of PayDay opens. It is not in the phone's backups. On an iPhone, deleting the app without signing out first leaves the encrypted copy in the iOS Keychain (Apple keeps Keychain items after an app is removed) until PayDay is installed and opened again; signing out before deleting the app removes it.
• Sharing: It never leaves the phone.
• Your Payy permission: Separately, the app keeps a note on your phone (or in your browser, for the web app) of whether and when you allowed Payy, copied from your PayDay account, so it knows whether to ask. Turning Payy off clears it.

How We Protect Your Data

• Encryption in transit: All data is sent over encrypted TLS connections
• Encryption at rest: Stored data is encrypted by our hosting provider
• Access controls: Strict role-based access limits who can view data
• Monitoring: Automated checks on security events, with alerts to our team
• Two-factor authentication: Required before you can connect a bank or make payments
• Bank connections: Through Akahu. At ANZ, ASB, BNZ, Kiwibank, NZHL and Westpac you approve access on their own screen

Data Retention

• While your bank is connected: We keep your account details, balances, account holder names, payment consent details and split history while your PayDay account is open, and refresh them from your bank. Transactions are read from Akahu when needed and not stored, apart from the payer names used to recognise your pay, a running figure for your usual pay amount, and the pay deposits recorded in your split history. The figures on the Insights tab are worked out in the app each time and are not stored either
• Insights choices and your Payy permission: Kept on your PayDay account until you change them or delete your account. Turning Payy off clears your Payy permission
• Payy conversations: Not stored on our servers. Each message is sent to Anthropic to write the reply
• When you disconnect your bank (in the app, at my.akahu.nz, or when your bank access ends): PayDay's access is ended, automatic splits stop, and we delete the bank data we no longer need. That includes balances, account numbers, account holder names, payment consent and payee details, deposit details, and related notification records. We also delete what we read from your transactions to recognise your pay: the payer names and your usual pay amount. If a pay source is still named after its payer, we rename it to "Pay" (or "Pay 2", "Pay 3" and so on), and when you reconnect we ask you to choose who pays you again. We keep the pay source names you typed yourself, your split rules, your Insights choices, and your account names and types, so your accounts can be matched when you reconnect. We also keep your split history, which is the record of money PayDay moved for you. These stay until you delete your account
• When you remove one account from PayDay's access but stay connected (for example at my.akahu.nz): we delete that account's bank data in the same way. For the pay sources paid into it, we delete the payer names and usual pay amount, and rename any source still named after its payer. Your split rules and split history are kept
• When you delete your account: We end PayDay's access at Akahu and delete your account and everything linked to it, including your split and transfer history. If a payment is still clearing, we ask you to wait until it settles, so the record of that money is not lost. Security logs (IP address and device) are kept, no longer linked to you, until they expire. If you have paid for a plan, we keep billing records for as long as New Zealand tax law requires
• Split and transfer history: Deleted with your account, within 30 days of account closure
• Billing records: Your invoices, your plan and subscription history, your Stripe or Apple payment references and your payment records are kept after your account is deleted, for as long as New Zealand tax law requires us to keep business records (currently 7 years). They are used only for tax, accounting and resolving payment disputes.
• Backups: Deleted data can remain in our database provider's encrypted backups until those backups expire
• Copies already sent to providers: Error reports, emails and team alerts already sent to Sentry, Resend and Slack, and messages already sent to Anthropic for Payy to answer, are kept under those providers' own retention periods
• Security logs: Deleted after 90 days, including after you delete your account
• Webhook records from Akahu: Deleted after 7 days

6 Your Rights

Under New Zealand's Privacy Act 2020, you have important rights regarding your personal information:

To exercise any of these rights, email hello@payday.nz or use the in-app settings.

7 NZ Privacy Act Compliance

PayDay is committed to full compliance with the New Zealand Privacy Act 2020. Here's how we meet our obligations:

Information Privacy Principles

• Purpose of collection: We only collect information necessary for providing our services
• Source of information: Personal information is collected directly from you or through Akahu with your consent
• Collection from subject: Where possible, we collect information directly from you
• Storage and security: We take reasonable steps to protect against loss, misuse, and unauthorised access
• Access and correction: You can access and correct your information as detailed in Section 6
• Accuracy: We take steps to ensure information is accurate, complete, and up-to-date
• Retention: We don't keep information longer than necessary
• Limits on use: We only use information for the purposes it was collected
• Limits on disclosure: We only disclose information as outlined in this policy
• Unique identifiers: We don't assign unique identifiers unless necessary for our functions

Privacy Officer

Our Privacy Officer oversees compliance with this policy and the Privacy Act. Contact:

Complaints

If you believe we've breached your privacy, please contact us first. If you're not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner:

8 Cookies & Analytics

Website

Our website uses Google Analytics, which sets cookies to measure how visitors use the site. It also uses the Meta pixel, which sets advertising cookies so we can measure visits from our Meta ads and whether a visitor joins the waitlist. Meta receives the pages you visit and the waitlist sign-up event, but not what you type into the form.

PayDay App

The app does not use analytics or advertising trackers. It sends error reports to Sentry so we can fix bugs (see Section 3).

Opting Out

You can block or delete cookies in your browser settings, or install Google's Analytics opt-out add-on. To stop Meta using website visits to show you ads, change your ad preferences in Meta's Accounts Centre on Facebook or Instagram. The website works without these cookies.

9 Policy Changes

We may update this Privacy Policy from time to time. When we make changes:

• We'll update the "Last updated" date at the top of this page
• For significant changes, we'll notify you via email or in-app notification
• We'll provide a summary of what's changed
• Continued use of PayDay after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically. Previous versions are available upon request.

10 Contact Us

If you have questions about this Privacy Policy or how we handle your information, please get in touch: