Privacy Policy

This Privacy Policy explains how PayYaar collects, uses, discloses, and safeguards information when you use our mobile apps, payyaar.today, and related services (the "Service"). It also describes your rights and choices. By using the Service, you acknowledge this Privacy Policy.

• Account and profile information: phone number, display name (if provided), email address (if provided through email sign-in, Google sign-in, or when you report a transaction issue), Google account identifier when you sign in with Google, preferred currency and language, optional UPI ID, optional monthly income you enter for savings-goal planning, account identifiers, subscription status, pcoin balance and ledger entries (including cashback, spends, bill payments, gift cards, top-ups, and in-app purchases), and feature preferences (such as settlement reminders, SMS expense alerts, SMS auto-save, preferred auto-save group, and smart suggestions). Passwords for email sign-in are handled by Firebase Authentication; we do not store your password in plaintext.

• Group and expense data: personal and group expenses, group names and templates, memberships, household details you enter (for example adults/children or a place linked to a Personal group), split details, payer/participant information, notes, budgets, savings goals (title, target, duration, progress fields, and related snapshots), AI plan summaries attached to groups, spending-behaviour insights generated for you, and settlement-related records you create or that are shared with your groups.

• India bill payments and recharges (where available): biller or operator identifiers, customer account or subscriber parameters you enter, fetched bill amounts, payment amounts, convenience fees, transaction IDs, payment gateway references (such as Razorpay identifiers), payment status, BBPS reference data, linked group/expense IDs when you choose to record a payment as an expense, and error messages returned by partners.

• Digital gift cards and international mobile top-ups (where available): country, product or operator, brand, amount and currency, the pcoin charged, order and partner transaction IDs, status, the recipient email you enter for a gift card, the mobile number you enter for a top-up, redemption codes or PINs returned for a successful gift card, and error or refund details.

• Transaction issue reports: when you report a problem from Profile → Transactions, we store the transaction ID, your issue description (if provided), the email address you submit with the report, and the report timestamp so we can investigate and respond. This covers India bill payments and recharges, digital gift cards, and international top-ups.

• Offers and coupons data: affiliate click records (including a tracking identifier linked to your account), cashback transaction status and commission amounts from partners, coupon unlocks, and revealed promo codes stored with your account.

• Sharing and referrals: if you open a PayYaar share link, install the Android app from a Play listing that includes a sharer id, or join a group when you do not already have a referrer, we store that sharer's or group creator's account id on your profile once as your referrer. We also store how many of your qualifying offer purchases have paid that referrer. On the referrer's pcoin ledger we store the referred account id, campaign name, amount, and status so we can credit or reverse the share. The in-app activity list shows the campaign and amount as a friend's purchase and does not show the friend's name. On Android, the Play install referrer string is read once on your device; we keep the numeric sharer id, not the full referrer string.

• Usage and quota information: monthly counts of smart captures, Item detections, SMS expense detections, settlement reminders, AI plans, smart suggestion refreshes, spending-behaviour refreshes, budget suggestions, and similar feature usage needed to enforce free-plan limits, pcoin overages, or Pro benefits.

• Device and technical information: app version, device model, operating system, Firebase Cloud Messaging (FCM) token for push notifications, crash and diagnostic logs (including Firebase Crashlytics), performance traces and network timing (Firebase Performance), security events, and App Check signals used to protect backend access.

• App analytics: Firebase Analytics events such as screens you open and features you use, associated with an account identifier while you are signed in. On Android, those events may also be received by Google Tag Manager. We use this to understand how the Service is used and to improve it. We do not sell this information.

• Subscription and billing metadata: purchase identifiers, renewal status, and related records from Google Play or the Apple App Store for Pro subscriptions and one-time pcoin pack purchases (we do not receive your full payment card details from those stores).

• Website analytics: when you visit payyaar.today, we and our analytics providers (such as Google Tag Manager / Google Analytics and Ahrefs) may collect device and usage data via cookies or similar technologies—for example pages viewed, approximate location derived from IP, referrer, and browser or device type—to understand traffic and improve the site.

• Support communications: information you send when you contact us.

Some features use device permissions only when you choose to use them:

• Contacts: if you pick people from your address book, names and phone numbers are read on your device to help you select numbers. We do not upload your entire contact list to our servers.

• Camera and photos: receipt images you choose to scan for smart capture, shopping-item photos you choose for Item detection, or UPI QR images you choose to scan to save a UPI ID.

• Location: when you use Item detection, approximate device location (and a reverse-geocoded place label when available) may be used on-device and included with the photo request so Gemini can estimate local unit market prices. You can decline location; estimates may then use general market knowledge for your currency region.

• Microphone: voice recordings you choose to submit for smart capture or AI Plan field fill.

• Shared text: if you use your device's share menu to send text from another app into PayYaar, that text is used only to draft an expense you confirm.

• Notifications: local and push alerts for settlement reminders, SMS expense suggestions and auto-save review reminders, smart spending suggestions, invites, and other service messages you enable.

• Offline and local storage: expense caches, SMS deduplication records, pending share drafts, and preference keys may be stored on your device until synced or cleared.

• Android home-screen widget: shortcut labels and the signed-in account id are stored on your device so the widget can open the right actions. The widget does not upload a separate profile or display your spending totals.

When you use smart capture, the content you submit—typed text, a voice recording, a receipt photo, or text you share into PayYaar from another app—is sent securely to Google's Gemini AI to suggest expense fields such as amount, description, and split type. When you use Item detection, the shopping photo you choose (and optional approximate location or place label for local pricing) is sent to Gemini to identify shoppable items and estimate unit market rates; you review quantities and rates before saving expenses. When you use AskYaar (PayYaar AI Chat), prompts and related context may be sent to Gemini to generate plans, expense drafts, offer or coupon suggestions, or bill, recharge, gift-card, and top-up drafts, including savings-goal and leftover summaries when you ask about them. Destination or place searches for trip planning may be sent through our servers to Google Places for autocomplete and place details.

When you enable smart spending suggestions, we may send relevant personal expense history to Gemini to suggest refill, bill, or subscription-style reminders delivered by push. When you request spending-behaviour insights, budget suggestions, or savings-goal coaching, we may send relevant personal expense history, monthly income you entered, and related summaries to Gemini to generate tips, budget drafts, or goal-difficulty estimates you can review. AI output is only a suggestion—you always review and choose whether to save or act. Google processes this content as our service provider, and we do not use your AI request content to train our own models.

If you turn on SMS expense alerts, PayYaar uses Android notification access to read text shown in bank debit SMS notifications on your device. PayYaar does not request SMS inbox permission. Parsing and classification (including filtering OTP, promotional, and non-debit messages) happen on your device. We store a short local deduplication record so the same alert is not suggested repeatedly. If you also enable auto-save, PayYaar may create an expense from a detected debit (amount and description, marked for your review) and sync that expense with your account. The full SMS body is not uploaded; only the parsed expense fields you save or auto-save are stored with your expenses. You can disable detect and auto-save anytime in Profile.

If you save a UPI ID (manually or by scanning a QR code), we store it with your profile so you and relevant group members can use settlement helpers. Opening a UPI payment deep link sends you to a third-party UPI app; PayYaar does not receive your bank credentials or complete the payment. Settlement reminder pushes use your FCM token and the reminder preferences you set.

When you use India bill pay or recharge features, we collect and store the information needed to initiate payment, show your Transactions history, and support disputes. This includes biller/operator details, account or subscriber parameters, amounts, fees, gateway transaction IDs, payment status, and timestamps. Card, UPI, and net-banking payments are processed by third-party gateways (such as Razorpay) and licensed BBPS settlement partners. We do not receive or store your full payment card number or CVV on our servers; gateways handle card entry according to their own security standards.

If you report an issue on a transaction, we require a valid email address with your report. We may prefill that field from your account email when one is already available. We store the report text, email, transaction reference, and report time so our team and authorized administrators can review the issue, coordinate with payment partners, and contact you. Do not include card numbers, CVV, or banking passwords in issue descriptions.

When you buy a digital gift card or an international mobile top-up with pcoin, we collect and store what is needed to place the order, show it in Transactions, and support disputes. For a gift card this includes the product, brand, country, amount, the recipient email you enter, and any redemption code or PIN the fulfillment partner returns. For a top-up this includes the country, operator, amount, and the local mobile number you enter. We send the recipient email or phone number, product, and amount to our fulfillment partner (such as Reloadly) so they can deliver the gift card or airtime. We store the partner transaction id, status, pcoin charged, and refund details.

Gift cards and top-ups are paid from your in-app pcoin balance. We do not collect a payment card for these orders. Delivered redemption codes stay in your account so you can open them later. If an order fails before fulfillment, we may return the pcoin to your balance and keep a record of the refund.

When you tap Shop now on an offer, we create a tracked affiliate link that includes an attribution identifier tied to your account (for example your user ID as a partner sub_id) so partners can report conversions. We receive transaction status and commission data from affiliate partners (such as CueLinks) to credit pcoin when cashback is confirmed.

When you unlock a coupon with pcoin, we store the unlocked code and related merchant metadata with your account so you can view it later in My coupons. Visiting a merchant from a coupon listing may use a separate tracked channel that does not earn cashback unless stated in the app.

When you buy a pcoin pack, the app store processes payment. We receive purchase verification data (such as purchase token, order id, product id, and purchase option id) so we can credit the correct pcoin amount to your account, prevent duplicate credits, and handle disputes or refunds. We do not receive your full card number from the store.

If your account has a referrer, a qualifying cashback purchase may also create a ledger entry on that person's account with your account id, the campaign name, the pcoin amount, and the status. We use this to pay and, if the purchase is cancelled or rejected, reverse their share. They see the campaign and amount, not your name.

Affiliate attribution and referral credit are necessary to operate Offers and sharing rewards, and are not a sale of your personal information.

We use information to: provide and operate the Service; authenticate users (including phone, Google, and email sign-in); sync and back up group, expense, plan, savings-goal, and rewards data; calculate goal progress from income and spending you record; process India bill payments and recharges through third-party gateways and BBPS partners; place digital gift card and international mobile top-up orders through fulfillment partners and show redemption details; display your Transactions history; investigate transaction issue reports and contact you at the email you provide; deliver push notifications and reminders you enable; process smart-capture, Item detection, AI Plan, smart-suggestion, spending-behaviour, budget-suggestion, savings-goal, and SMS-suggestion or auto-save features; attribute affiliate shopping and PayYaar shares and credit pcoin, including a referrer's share of a referred person's qualifying cashback; verify and fulfill pcoin pack purchases; unlock and display coupons; enforce free-plan, pcoin, and Pro limits; measure app and website usage, diagnose crashes, and monitor performance; detect, prevent, and investigate abuse (including cashback fraud, purchase abuse, and fraudulent transaction reports); troubleshoot and improve reliability; communicate service notices; and comply with legal obligations. We do not sell your personal information.

Depending on your jurisdiction, we process information under one or more legal bases: performance of a contract (to provide the Service), legitimate interests (such as security, fraud prevention, and product improvement), compliance with legal obligations, and consent (where required—for example optional permissions or specific processing).

We share information only as needed to operate the Service:

• Vendors and processors such as Google Firebase (authentication, Firestore, Cloud Functions, push messaging, Analytics, Crashlytics, Performance, and App Check), Google Sign-In, Google Tag Manager, Google's Gemini AI via Firebase AI Logic, Google Places (location lookups for AI Plan), CueLinks and similar affiliate networks (click attribution and cashback reporting), coupon feed partners, telecom/SMS partners used for phone verification, app-store billing platforms, India payment gateways and BBPS partners (such as Razorpay), gift-card and international top-up fulfillment partners (such as Reloadly), website analytics providers (such as Google Tag Manager / Google Analytics and Ahrefs), and support tools.

• Your group members, as part of core product functionality (expenses, splits, settlements, shared plans, and UPI details you choose to make available for settlement).

• Authorized PayYaar administrators and support staff who need access to investigate transaction issue reports, fraud, billing disputes, or legal requests.

• In connection with a merger, acquisition, or reorganization, or when required by law or needed to protect rights, safety, and security.

Merchants you shop with receive whatever information you provide directly on their sites or apps; PayYaar does not control those merchants. Billers and operators receive the account or subscriber details required to fulfill a payment you initiate. Gift-card brands and fulfillment partners receive the recipient email, product, and amount needed to deliver a gift card you buy. Mobile operators and fulfillment partners receive the phone number, operator, and amount needed to deliver a top-up you buy.

We retain account, group, expense, plan, savings-goal, pcoin ledger (including referrer-share entries), the referrer stored on your account, coupon unlock, affiliate click/transaction, bill payment and recharge records, digital gift card and international top-up orders (including recipient email, phone number, and redemption codes), transaction issue reports (including report email and description), and in-app purchase verification records while your account is active and for a reasonable period afterward for backups, fraud prevention, legal compliance, billing disputes, payment partner reconciliation, and dispute resolution. Local SMS deduplication and pending-expense data on your device can be cleared by disabling the feature, clearing app data, or uninstalling the app. App and website analytics, crash, and performance data are retained according to each provider's settings and our operational needs. When information is no longer needed, we delete or de-identify it within reasonable timelines.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit where appropriate, Firebase App Check, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or port certain personal information, and to withdraw consent where processing is based on consent. You can manage optional features (SMS expense alerts, SMS auto-save, settlement reminders, smart suggestions, smart capture, Item detection, savings goals) in the app, revoke device permissions in system settings, and request account deletion via our delete-account page (which covers profile data, the referrer stored on your account, pcoin balance including purchased packs and referrer-share ledger entries, coupon wallet, affiliate click history, bill payment and recharge transaction records, digital gift card and international top-up orders including recipient email, phone number, and redemption codes, transaction issue reports, purchase verification records tied to your account, and UPI ID as described there). For website analytics, you can use browser controls to block or clear cookies where available. Contact us to submit a privacy request. We may need to verify your identity before fulfilling requests.

The Service is not intended for children below the age at which parental consent is required in the relevant jurisdiction. We do not knowingly collect personal information from such children. If you believe a child provided personal information, contact us so we can take appropriate action.

We and our service providers (including Google Firebase, Google's Gemini AI, Google Places, Google Analytics, Crashlytics, and Performance, affiliate partners, gift-card and top-up fulfillment partners such as Reloadly, and website analytics providers) may process information in countries other than your own, which may have different data protection laws. Where required, we implement appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. We will post updates on payyaar.today and in the app and revise the "Last updated" date. For material changes, we may provide additional notice when required by law.

For privacy questions, rights requests, or complaints, contact us at support@payyaar.today.