Privacy Policy - Paidly
Privacy Policy
Last Updated: July 17, 2026
At a Glance: Summary of Key Points
Before diving into the details, here is a quick overview of how we handle your information:
- What personal information do we collect? We collect device and app-version information, anonymous usage analytics, and purchase entitlement status. Any subscription details you enter or discover are stored locally on your device, not on our servers.
- Do we process any sensitive personal information? No, we do not collect or process sensitive personal information.
- Do we collect information from third parties? If you choose to connect your Gmail account, we transiently process email metadata on your device to find subscriptions, but this data is never uploaded to us.
- How do we use your information? We use your information to provide subscription tracking, deliver renewal and budget notifications, manage your premium entitlements, and improve the app.
- Who do we share your personal information with? We share minimal technical data with essential service providers (like Apple, Google, and RevenueCat) to process purchases and analyze app performance. We never sell your personal data.
- What are your privacy rights? Because your subscription data lives on your device, you have ultimate control. You can access, modify, or delete your data directly within the app, and you can opt out of analytics at any time in your settings.
- How can you contact us? You can reach us anytime at ekirapapaul@gmail.com.
1. Introduction
Welcome to Paidly. We built Paidly to be a privacy-first subscription tracker that helps you manage recurring costs, monitor budgets, and gain spending insights without compromising your personal data. Because we believe your financial information belongs to you, Paidly is designed to work entirely on your device. We do not require user accounts, and we do not operate a backend server to store your subscription data.
Protecting your privacy isn't just a legal requirement for us; it is the core philosophy behind how our app is built. This Privacy Policy explains how we collect, use, and protect your information when you use the Paidly app for iOS and Android, as well as our website at https://usepaidly.app. It also outlines your rights under global privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
If you have any questions about this policy or how we handle your data, please reach out to us at ekirapapaul@gmail.com.
2. What We Collect & Why
To provide you with a seamless subscription tracking experience, we process certain types of information. Because of our privacy-first architecture, much of this data never leaves your device.
Information You Give Us Directly
When you use Paidly, you manually enter subscription details, budgets, and pricing information. We need this information to power the core features of the app, such as calculating your spending and scheduling renewal notifications.- Where it lives: This data is stored locally on your device in a secure SQLite database. We do not have access to it.
- Legal basis: Processing is necessary for the performance of our contract with you.
Information Collected Automatically
To ensure the app functions correctly and to help us understand how to improve it, we automatically collect certain technical information when you use Paidly.- Device and App Data: We collect your device type, operating system, and app version.
- Analytics: We collect anonymous usage events (like which features are used most often) to guide our development.
- Purchase Status: We track your in-app purchase and subscription entitlement status to ensure you have access to the premium features you have paid for.
- Legal basis: Legitimate interest (for analytics and app improvement) and Contract (for managing purchase entitlements).
Information Processed via Third-Party Integrations
We offer optional features that interact with third-party services to make tracking your subscriptions easier.- Gmail Integration: If you choose to connect your Gmail account, Paidly uses a read-only scope (
gmail.readonly) to scan your emails for subscription receipts. We process email metadata (subject, sender, snippet) transiently to identify subscriptions. This processing happens entirely in memory on your device. The data is never persisted beyond the user-approved import and is never uploaded to any server. - Service Logos & Currency Rates: When you add a subscription, the app pings external APIs (Logo.dev, Clearbit, and open.er-api.com) to fetch the correct service logo and current currency exchange rates. These services receive the name of the tracked service and your device's IP address to fulfill the request.
- Legal basis: Consent (for Gmail integration) and Legitimate interest (for fetching logos and currency rates).
3. How We Use Your Information
We are intentional about how we use your data. We only process information for specific, clearly defined purposes.
- Core Service Delivery: We use your locally stored data to provide the app's primary functions, including tracking subscriptions, generating spending insights, and triggering on-device notifications for renewals, trial endings, price changes, and budget limits. (Legal basis: Contract)
- Service Improvement: We use anonymous analytics events to understand user behavior, identify bugs, and determine which new features to build next. (Legal basis: Legitimate interest)
- Security and Fraud Prevention: We process purchase entitlement data to validate App Store and Google Play transactions, ensuring secure access to premium features and preventing fraudulent use of our services. (Legal basis: Legitimate interest)
- Legal Compliance: We may process technical and purchase data to comply with tax laws, financial reporting requirements, and other legal obligations. (Legal basis: Legal obligation)
4. When We Share Your Information
We share your information only when absolutely necessary to run Paidly. We never sell or share your personal information with third parties for their own commercial use.
When we do share data, it is limited to the following scenarios:
- Essential Service Providers: We use trusted third-party platforms to help operate our business. These include:
- Legal Requirements: We will disclose information if we are legally required to do so by a valid subpoena, court order, or other legal process.
- Business Transitions: If Paidly is involved in a merger, acquisition, or sale of assets, your technical and entitlement data may be transferred as part of that transaction. We will notify you of any such change.
5. Your Privacy Rights
Depending on where you live (including under the GDPR in Europe and the CCPA/CPRA in California), you have specific rights regarding your personal data. Because Paidly does not store your subscription data on our servers, exercising these rights is largely in your own hands.
- Access and Correct Your Data: You can view, edit, and update all of your subscription and budget data directly within the Paidly app at any time.
- Delete Your Data: You can delete individual subscriptions within the app. To delete all your data entirely, simply uninstall the Paidly app from your device. Because we do not keep copies on a server, uninstalling the app permanently removes your data.
- Opt-Out of Analytics: You have the right to opt out of data collection for app improvement. You can easily disable anonymous analytics at any time by toggling the switch in the app's Settings menu.
- Withdraw Consent: If you have connected your Gmail account, you can disconnect it at any time within the app or via your Google Account security settings. Withdrawing consent will not affect the legality of any local processing that occurred prior to withdrawal.
- Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority.
6. Data Security
We have built Paidly from the ground up to minimize security risks by simply not holding your sensitive data.
- On-Device Storage: All of your financial and subscription data is stored locally on your device using a SQLite database. We do not operate a backend server, meaning there is no central database of user data for hackers to breach.
- Secure Connections: Whenever the app needs to communicate with the outside world (such as fetching a logo, updating currency rates, or validating a purchase), we use TLS encryption to protect the data in transit.
- Secure Integrations: If you use the Gmail integration, your access tokens are managed securely by the native Google Sign-In SDK secure storage.
- Your Responsibilities: Because your data lives on your device, the security of that data depends heavily on your device's security. We strongly recommend using strong device passcodes, enabling biometric authentication (like Face ID or fingerprint scanning), and keeping your operating system up to date.
7. Data Retention
We keep information only for as long as necessary to fulfill the purposes outlined in this policy.
- Subscription Data: Your entered subscription data remains on your device indefinitely until you manually delete it or uninstall the Paidly app.
- Gmail Scan Data: Data processed during optional Gmail scans is held only in your device's active memory. It is never persisted to storage and disappears immediately after the scan is complete.
- Analytics Data: Anonymous analytics events collected via Google Firebase are retained for up to 14 months before being automatically deleted.
- Purchase Records: We retain anonymous purchase entitlement records for as long as necessary to comply with financial reporting and tax obligations, which is typically up to 7 years.
8. Tracking Technologies & SDKs
Unlike traditional websites that use cookies, mobile apps like Paidly use Software Development Kits (SDKs) to provide functionality and track performance.
We use the Google Firebase SDK to collect anonymous analytics about how you navigate and use the app. This helps us understand which features are popular and where users might be experiencing bugs.
Managing Your Preferences: We believe you should have the final say over whether you are tracked. You can easily opt out of Firebase Analytics tracking at any time by visiting the Settings menu inside the Paidly app and turning off the analytics toggle.
9. Children's Privacy
Paidly is designed for a general audience and is not intended for children. We do not knowingly collect personal information from children under the age of 13 (or under 16 in certain jurisdictions subject to the GDPR).
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at ekirapapaul@gmail.com. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
10. International Transfers
Paidly is available globally. While your subscription data stays on your device, the technical data we collect (such as analytics and purchase validation data) may be transferred to and processed in the United States by our service providers (like Google and RevenueCat).
When we transfer data originating from the European Economic Area (EEA) or the UK to countries that do not have equivalent data protection laws, we ensure appropriate safeguards are in place. This typically includes relying on Standard Contractual Clauses (SCCs) approved by the European Commission or ensuring our partners participate in recognized data privacy frameworks.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our app, legal requirements, or industry standards.
When we make significant changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, providing a notice within the Paidly app. Because we do not require user accounts or collect email addresses, we cannot email you directly about policy changes. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
12. Contact Us
We welcome your questions, comments, and feedback regarding this Privacy Policy or our privacy practices.
You can reach us at:
- Email: ekirapapaul@gmail.com
- Website: https://usepaidly.app
We take your privacy concerns seriously and aim to respond to all inquiries within a reasonable timeframe, typically within 3 to 5 business days.