Privacy Policy

Last updated: August 14, 2026

This Privacy Policy explains what information Payday Planner collects, why, who it is shared with, and what control You have over it. Payday Planner is operated by Noviusoft LLC ("We", "Us", "Our"), a company based in North Carolina, United States. It covers the website at payday-planner.com and the Payday Planner apps for iOS and Android (together, the "Service").

The Short Version

Payday Planner holds detailed information about Your money, so it is worth being direct about how it is handled.

We do not connect to Your bank. The Service has no access to Your real accounts, balances, or transactions. Everything it knows, You typed in.
We do not sell or rent Your information, and We do not share it for advertising.
We do not use analytics or tracking software. There is no Google Analytics, no advertising pixel, no third-party analytics SDK, and no cross-site tracking in the Service.
Your financial data is not used to train machine learning models, by Us or anyone We work with.
You can export everything and delete everything, yourself, from within the Service — including after a subscription lapses, when the Service becomes read-only rather than locked.

Information We Collect

Account Information

When You create an account, We collect and store:

Your first and last name, and Your email address.
Your password, stored only as a salted cryptographic hash. If You sign in with Google or Apple instead, We store an identifier from that provider rather than a password.
Your profile picture, if You upload one.
Whether two-factor authentication is enabled and, if it is, the secret and recovery codes needed to verify it. Both are stored encrypted.

Financial Information You Enter

This is the substance of the Service, and it is the most sensitive information We hold. Depending on what You choose to record, it includes:

Bank and card accounts You set up — their names, types, and the balances You enter.
Your income: paycheck amounts, pay dates, and pay schedules.
Bills and recurring expenses — amounts, due dates, and which account pays them.
Loans and other debts — balances, interest rates, and payment terms.
Transfers between Your accounts, budgets, budget history, and any tags, categories, or notes You add.

You choose what to enter. The Service works with as much or as little as You give it, and none of these fields are required in order to have an account.

Payment Information

We never receive or store Your full card number. Payments made through Our website or the Android app are processed by Stripe; purchases made in the iOS app are processed by Apple. We store only what is needed to know the state of Your subscription: the plan, its status, renewal and trial dates, and the customer or transaction identifiers issued by Stripe, Apple, or RevenueCat. We also keep a history of subscription events (started, renewed, cancelled, payment failed) for support and billing purposes.

Information Collected Automatically

Sign-in and session records. When You sign in, We record the time, Your IP address, Your browser or app user agent, the platform, and the sign-in method. This is used to keep You signed in, to show You Your own recent sign-in activity, and to detect unauthorized access.
Push notification tokens. If You enable notifications on a mobile device, We store the push token for that device, its platform, and when it was last seen, along with a log of the notifications We sent You.
Server logs. Our servers keep operational logs that may include IP addresses, request paths, and error details. These are used to run and debug the Service.

We do not collect advertising identifiers, location data, contacts, or Your device's address book, and We do not track Your activity across other apps or websites.

Support and Feedback

If You email Us or send a support request through the Service, We receive the contents of that message. If You rate a help article, We record the rating.

How We Use Your Information

To provide the Service: storing Your data, performing the calculations and forecasts, and syncing between Your devices.
To authenticate You, keep Your session active, and protect Your account.
To process subscriptions, apply trials, and handle billing problems.
To send You transactional email You need — email verification, password resets, security alerts, payment failures, and important changes to the Service or these policies.
To send push notifications You have opted into, such as upcoming bill or payday reminders. You control these in notification settings.
To respond to Your support requests.
To maintain security, investigate abuse, and comply with legal obligations.
To fix bugs and improve the Service.

We do not use Your financial data for advertising, for profiling, or to train machine learning models, and We do not sell it or make it available to other users. The Service has no public areas, no social features, and no sharing between accounts.

Who We Share Information With

We do not sell Your personal information, and We do not share it for cross-context behavioral advertising. We do rely on a small number of service providers to operate the Service, each of which receives only what it needs:

Stripe — processes payments made through Our website and the Android app. Receives Your email address and payment details, which You provide directly to Stripe.
Apple — processes in-app purchases made in the iOS app, as the merchant of record. Apple's handling of that transaction is governed by Apple's privacy policy.
RevenueCat — verifies and tracks the status of App Store subscriptions. Receives subscription identifiers and purchase events, not Your financial data.
Google and Apple sign-in — only if You choose to sign in that way. We receive Your name, email address, and a provider identifier. If You use Apple's Hide My Email, We receive only the relay address.
Our email provider (Mailgun, or an SMTP provider We configure) — delivers transactional email. Receives Your email address and the contents of those messages.
Cloudflare — stores profile pictures You upload.
Expo, Apple, and Google push services — deliver push notifications to Your device. Receive the device token and the notification contents.
Our customer relationship system — receives Your name, email address, and subscription lifecycle events (signed up, subscribed, cancelled, trial expired) so We can manage the customer relationship and send service communications. It does not receive Your financial data.
Our hosting and database providers — store and serve the Service and its data on Our behalf.

We may also disclose information:

To comply with the law — in response to a valid legal request such as a subpoena or court order, or where required by law.
To protect rights and safety — where We believe in good faith that disclosure is necessary to investigate wrongdoing, enforce Our Terms, protect the rights, property, or safety of Our users or the public, or defend against legal liability.
In a business transfer — if We are involved in a merger, acquisition, financing, or sale of assets, Your information may be transferred. We will notify You before Your information becomes subject to a different privacy policy, and any acquirer will remain bound by commitments at least as protective as these.

Third-Party Applications You Connect

The Service provides an authenticated interface that lets You connect third-party applications — including AI assistants such as Claude or ChatGPT — to Your account, so they can read and manage Your bills, accounts, expenses, loans, and paychecks on Your behalf. Connecting one requires You to sign in and explicitly approve the connection.

If You connect such an application, Your financial data is sent to it, and once there it is governed by that application's privacy policy, not this one. We have no control over how it is stored, retained, or used — including whether that provider uses it to train models. Connect only applications You trust, and review their policies first. You can revoke a connection at any time in Your account settings, which immediately stops further access.

Cookies

We use cookies only where they are strictly necessary to operate the Service: to sign You in, keep Your session active, and protect against fraudulent use of accounts. Some are session cookies that end when You close Your browser; others persist so You are not signed out every visit.

We do not use advertising cookies, analytics cookies, or tracking pixels, and We do not permit third parties to place cookies through the Service. If You block essential cookies, You will not be able to sign in.

How Long We Keep Information

Your account and financial data are kept until You delete them or delete Your account.
Sign-in records and notification logs are kept for a limited period to support security review, then removed.
Billing and subscription records are kept as long as needed to meet tax, accounting, and legal obligations, even after account deletion.
Backups are retained on a rolling 365-day basis, so deleted information may persist in a backup for up to one year before that backup expires.

Deleting Your Information

You can delete Your account yourself, from account settings in the Service. Doing so deletes Your profile and Your financial data — accounts, bills, paychecks, expenses, loans, transfers, budgets, and tags.

A limited amount of information may survive deletion where We have a legal obligation or lawful basis to keep it, such as billing records needed for tax purposes, and records needed to resolve a dispute or enforce Our agreements. Residual copies may remain in Our backups for up to 365 days, after which those backups expire.

Deleting Your account does not cancel a subscription purchased through the Apple App Store — cancel that through Your Apple Account subscription settings. If You would rather We handle deletion for You, email [email protected].

Your Rights and Choices

Access and portability. You can export Your data from the Service at any time, in a machine-readable format. This works even if Your subscription has lapsed — We do not withhold Your own data over a subscription.
Correction. You can edit Your profile and any data You have entered, directly in the Service, while Your subscription or trial is active.
Deletion. You can delete individual records, or Your entire account, from within the Service. Account deletion works at any time and does not require an active subscription.
Communications. You can turn push notifications on or off in notification settings. Transactional email You cannot opt out of while You hold an account, because it concerns Your account's security and billing.
Revoking connections. You can disconnect any third-party application You have authorized.

Depending on where You live, You may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to know what We hold, to obtain a copy, to request correction or deletion, and not to be discriminated against for exercising those rights. Most of these You can act on yourself in the Service; for anything else, email [email protected] and We will respond within the time the applicable law requires.

For California residents: We do not sell personal information and We do not share it for cross-context behavioral advertising, and We have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of anyone under 16.

Security

To protect Your information We:

Encrypt data in transit using TLS.
Store passwords only as salted hashes, never in a recoverable form.
Offer two-factor authentication, which We recommend enabling.
Scope every database query to Your own account, so one account cannot read another's data.
Restrict administrative access to authorized personnel.

Authorized personnel may access an account to investigate a support request or suspected abuse. Those sessions are recorded, and they are the exception rather than routine practice.

No method of transmission or storage is completely secure, and We cannot guarantee absolute security. If a breach affects Your personal information, We will notify You as required by applicable law.

Children's Privacy

The Service is not directed to children under 13, and We do not knowingly collect personal information from them. If You are a parent or guardian and believe Your child has provided Us with personal information, contact [email protected] and We will delete it. If Your jurisdiction requires parental consent for a minor's data, We may require that consent before collecting or using it.

Where Your Information Is Processed

We operate in the United States, and Your information is stored and processed there and in other locations where Our service providers operate. Data protection laws in those places may differ from those where You live. By using the Service, You understand that Your information will be transferred to and processed in the United States.

Changes to This Policy

We may update this Privacy Policy. We will post the new version on this page and update the "Last updated" date. If a change is material, We will notify You by email or a prominent notice in the Service before it takes effect.

Contact Us

Questions, requests, or concerns about privacy:

Email [email protected]