Privacy Policy

Paiso helps you record and split shared expenses. We built it to collect as little as possible. We don't show ads, we don't track you across apps or websites, and we never sell your data. Paiso is a ledger only: it never processes payments or moves money.

What stays on your device

• Receipts and documents. Text is read on your device using Apple's Vision framework. Receipt photos are kept only on your device and are never uploaded.
• Loan documents. When you scan or import a loan letter, statement or PDF for Money Coach, Paiso reads it on your device to extract details like the amount, interest rate, tenure, EMI and payment date, then discards the document immediately. Loan documents are never saved or uploaded. Only the numbers you confirm are kept.
• Contacts. If you allow Contacts access, Paiso reads your contacts on your device so you can search them and add friends. Your address book is never uploaded. To show which contacts are already on Paiso, the app sends only SHA-256 hashes (one-way fingerprints) of your contacts' email addresses. Our server compares them with the hashes of registered accounts, returns the matches, and does not store the hashes you sent. If you choose limited access, Paiso only sees the contacts you pick.
• Invite texts. When you invite someone by text, Paiso opens Messages on your phone with the invite ready. It's sent from your own number by you, never by Paiso, and we don't see the message.
• Notifications and Face ID. Reminders, such as EMI reminders and evening nudges, are scheduled locally. Face ID is handled entirely by iOS, and Paiso never sees biometric data.
• Apple Pay prompts. If you set up the optional Shortcuts automation for “Split it?” prompts, iOS passes only the amount and merchant of that payment to Paiso, on your device.

What we store on our servers

Only if you create an account:

• Account details: your name and email address. For email sign-in we store a securely hashed password; verification codes are stored only as hashes and expire after 10 minutes. If you use Sign in with Apple or Google, we store the account identifier they give us and the email they share (with Apple, this may be a private relay address).
• Your personal ledger: your friends (names and any email or phone you entered), expenses, payments, loans and settings, so you can sync and restore them.
• Shared groups: when you create or join a shared group, its details (such as name, emoji and currency), its members' names and any email addresses entered for them, and the expenses and settle-ups in that group are stored on our server. Everything in a shared group is visible to every member of that group. If someone adds you to a group by email, you're linked to it when you sign in with that verified email address.
• Invites: invite links and codes, who created them and when they expire.

You can use Paiso without an account. In that case nothing leaves your device except anonymous exchange-rate requests.

How we use it

Only to provide the app: signing you in, syncing and backing up your ledger, keeping shared groups in sync for their members, delivering invites you choose to send, and keeping the service secure (for example, rate-limiting sign-in attempts by IP address). We don't use your data for advertising or profiling, and we don't share it with anyone except the service providers listed below.

Service providers

• Hosting: our API and database run on servers in the European Union, served through Cloudflare, which processes network traffic to protect the service.
• Brevo (email delivery): we use Brevo to send sign-in verification codes and the invite emails you choose to send. Brevo receives the recipient's email address and the message content, such as your name and the group name.
• Apple and Google: for Sign in with Apple or Google, if you choose them.
• Exchange rates: the app fetches public currency rates from open.er-api.com. These requests contain no personal data.

Security

Data is encrypted in transit (HTTPS). Passwords are stored only as salted scrypt hashes. On your iPhone, your ledger is stored with iOS data protection, and your session token is kept in the Keychain. You can also lock Paiso with Face ID.

Retention and deletion

We keep your account data while your account exists. You can delete your account at any time in Settings → Delete account. This permanently erases your account and your personal cloud ledger from our servers. Expenses you added to a shared group stay visible to that group's other members, because they're part of the group's shared record. Leaving a group removes you from it, and a group's owner can delete the group for everyone. Server backups are kept for about a day, so deleted data is gone from backups within 25 hours. You can also erase all data on your device in Settings → Erase everything.

Your rights

Depending on where you live (for example, under the GDPR in the EU, or India's DPDP Act), you can ask to access, correct, export or delete your data. You can export your data as CSV in the app at any time, or contact us using the details below.

Children

Paiso isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above and, for significant changes, let you know in the app.

Contact

Questions or requests: [email protected]