Privacy Policy

Last Updated: October 13, 2026

1. Introduction

Welcome to PaidUp. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website or use our application and tell you about your privacy rights.

Where PaidUp is offered. PaidUp is not offered in the European Union. The app is not available in the App Store in any EU member state, and we do not market PaidUp to people there. If you are in the European Union, please do not create an account. If we learn that an account belongs to someone in the European Union, we may close it and delete its data. To ask us to delete an account, write to info@impactconsulting.ai.

2. Information We Collect

We collect and process the following types of information:

2.1 Information You Provide

  • Account Information: Email address, full name, phone number (optional)
  • Profile Information: Avatar/profile picture, preferred currency, payment method handles (Venmo, PayPal, Cash App, Zelle)
  • Bill Information: Receipt photos, bill amounts, participant details, notes and descriptions
  • Communication Data: Comments on bills, messages, and feedback you provide

2.2 Information We Collect Automatically

  • Usage Data: How you interact with our service, features used, time spent
  • Device Information: Browser type, device type, IP address, operating system
  • Analytics Data: Session data, screen views, feature engagement metrics
  • Location Data: General location based on IP address (not precise location)

2.3 Receipt Image Processing

When you use our AI-powered receipt scanning feature, receipt images are:

  • Uploaded to our cloud storage (Supabase)
  • Sent to OpenAI's API to read the merchant, date, items, totals, tax and tip
  • Deleted 90 days after upload

The details read from a receipt are kept with the expense until the expense is deleted or your account is. We do not keep the full text of the receipt.

3. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: To provide bill splitting, payment tracking, and settlement features
  • AI Processing: To extract data from receipt images using artificial intelligence
  • Account Management: To create and manage your account, authenticate you, and provide customer support
  • Communication: To send you transaction notifications, reminders, and service updates
  • Analytics: To understand how users interact with our service and improve our features
  • Security: To detect fraud, abuse, and security incidents
  • Legal Compliance: To comply with legal obligations and enforce our terms

4. Information Sharing

We share your information in the following circumstances:

4.1 With Other Users

When you create a bill split, your name, email, and payment details are shared with other participants in that bill. Profile information is visible to your friends and group members.

4.2 With Service Providers

  • Supabase: Database, authentication, and file storage
  • OpenAI: AI-powered receipt processing and data extraction
  • Cloud Infrastructure: Hosting and content delivery services

4.3 For Legal Reasons

We may disclose your information if required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

5. Data Security

This is how your data is handled:

  • In transit: The app talks to our servers over HTTPS
  • Passwords: Stored by our sign-in provider (Supabase) as hashes, not as the password itself
  • Who can see what: Database rules limit expenses, groups and profiles to the people involved
  • Files: Receipt photos, payment-confirmation images and invoices are stored as files that anyone with the file's link can open. The links are long and random and are not listed anywhere, but anyone you share a link with can see the file

No system is completely safe from attack, and we cannot promise that your data will never be exposed.

6. Data Retention

We retain your information for as long as necessary to provide our services:

  • Account Data: Retained until you delete your account
  • Bills and Transactions: Retained indefinitely for financial records unless deleted
  • Analytics Data: Aggregated and anonymized after 2 years
  • Receipt Photos: Deleted 90 days after upload
  • Details Read From Receipts: Kept until the expense is deleted or your account is
  • Payment-Confirmation Images: Deleted 90 days after upload; the payment record (amount, date, who paid whom) is kept
  • Invoices Attached to a Request: Kept until the expense is deleted
  • Session Data: Automatically deleted after 30 days of inactivity

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing of your personal data
  • Restrict: Request restriction of processing
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@impactconsulting.ai

8. Cookies and Tracking

We use local storage and session storage to:

  • Keep you logged in between sessions
  • Remember your preferences (currency, language)
  • Track analytics and usage patterns (anonymous)
  • Queue offline actions for later synchronization

You can clear this data through your browser settings, but this may affect functionality.

9. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

11. Third-Party Links

Our service may contain links to third-party websites (payment apps like Venmo, PayPal, etc.). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or shared
  • Right to opt-out of the sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising your rights

Note: We do not sell your personal information to third parties.

15. GDPR Compliance (EU Users)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

  • Legal Basis: We process data based on consent, contract performance, or legitimate interests
  • Data Controller: PaidUp is the data controller for your information
  • Data Protection Officer: Contact info@impactconsulting.ai
  • Supervisory Authority: You have the right to lodge a complaint with your local data protection authority