What stays on your device
Everything you enter in the app (pay, bills, debts, pay-later plans, the payments you tick and your money-type answers) is stored only in your browser on that device. Backups you export are files you keep.
What we receive, and why
When you buy. Payhip processes your payment and shares your email and order details with us so we can send your unlock code and help with your order. We never see your card details.
When you unlock the app. We store your email, the first name you give us (optional), a one-way scrambled version of your code, a random ID for the device, the app version, your country and your browser type. This checks your licence, limits it to three devices and lets us help you. If you tick the box for news and offers, we may email you about the app; you can say no at any time.
When you use Penny’s smart features. If you turn on smart answers, send a statement to read or ask Penny to read messy text, your question, the plan numbers she needs and your money profile answers, like what you love spending on (or the statement you chose), pass through our server to our AI provider, Anthropic, to write the answer. Your name and email are never included. We don’t store what you sent or the answer; we only count how many smart requests each licence makes in a day, for the fair-use limits. Anthropic handles this data under its commercial terms, which don’t allow it to train its models on it, and may keep it briefly for safety checks.
When you write to us. The contact form stores your name, email, topic and message, plus a scrambled version of your internet address to stop spam.
When you visit the website. Our host keeps standard technical logs. Our fonts are served from our own site, so no font service sees your visit. There are no ads, no tracking cookies and no analytics cookies.
Who helps us
Payhip (payments and delivery), Cloudflare (hosting and our database) and Anthropic (Penny’s smart features). Each only gets what it needs to do its job.
How long we keep it
Licence and unlock records for as long as your licence is active, and then as long as we need them for our records. Messages for up to two years. Smart-feature counts for up to thirteen months.
Your choices
You can ask us what we hold about you, to correct it or to delete it, and you can stop marketing emails at any time. Wherever you live, including the UK, the EU, California and Canada, contact us and we’ll do it. We don’t sell or share personal information for advertising.
Children
Payday Payoff is made for adults and isn’t meant for anyone under 18.
Changes
If this policy changes, we’ll update the date at the top, and tell you in the app if the change matters.