Privacy Policy

This Privacy Policy explains how PayYaar collects, uses, discloses, and safeguards information when you use our mobile apps, payyaar.today, and related services (the "Service"). It also describes your rights and choices. By using the Service, you acknowledge this Privacy Policy.

• Account and profile information: phone number, display name (if provided), email address (if provided through sign-in or when you report a transaction issue), preferred currency and language, optional UPI ID, account identifiers, subscription status, pcoin balance and ledger entries (including cashback, milestones, referrals, spends, and in-app purchases), and feature preferences (such as settlement reminders, SMS expense alerts, and smart suggestions).

• Group and expense data: personal and group expenses, group names and templates, memberships, household details you enter (for example adults/children or a place linked to a Personal group), split details, payer/participant information, notes, budgets, AI plan summaries attached to groups, spending-behaviour insights generated for you, and settlement-related records you create or that are shared with your groups.

• India bill payments and recharges (where available): biller or operator identifiers, customer account or subscriber parameters you enter, fetched bill amounts, payment amounts, convenience fees, transaction IDs, payment gateway references (such as PayU or Razorpay identifiers), payment status, BBPS reference data, linked group/expense IDs when you choose to record a payment as an expense, and error messages returned by partners.

• Transaction issue reports: when you report a problem from Profile → Transactions, we store the transaction ID, your issue description (if provided), the email address you submit with the report, and the report timestamp so we can investigate and respond.

• Offers and coupons data: affiliate click records (including a tracking identifier linked to your account), cashback transaction status and commission amounts from partners, coupon unlocks, and revealed promo codes stored with your account.

• Usage and quota information: monthly counts of smart captures, Item detections, SMS expense detections, settlement reminders, AI plans, smart suggestion refreshes, spending-behaviour refreshes, budget suggestions, and similar feature usage needed to enforce free-plan limits, pcoin overages, or Pro benefits.

• Device and technical information: app version, device model, operating system, Firebase Cloud Messaging (FCM) token for push notifications, crash/diagnostic logs, security events, and App Check signals used to protect backend access.

• Subscription and billing metadata: purchase identifiers, renewal status, and related records from Google Play or the Apple App Store for Pro subscriptions and one-time pcoin pack purchases (we do not receive your full payment card details from those stores).

• Website analytics: when you visit payyaar.today, we and our analytics providers (such as Google Tag Manager / Google Analytics and Ahrefs) may collect device and usage data via cookies or similar technologies—for example pages viewed, approximate location derived from IP, referrer, and browser or device type—to understand traffic and improve the site.

• Support communications: information you send when you contact us.

Some features use device permissions only when you choose to use them:

• Contacts: if you pick people from your address book, names and phone numbers are read on your device to help you select numbers. We do not upload your entire contact list to our servers.

• Camera and photos: receipt images you choose to scan for smart capture, shopping-item photos you choose for Item detection, or UPI QR images you choose to scan to save a UPI ID.

• Location: when you use Item detection, approximate device location (and a reverse-geocoded place label when available) may be used on-device and included with the photo request so Gemini can estimate local unit market prices. You can decline location; estimates may then use general market knowledge for your currency region.

• Microphone: voice recordings you choose to submit for smart capture or AI Plan field fill.

• Shared text: if you use your device's share menu to send text from another app into PayYaar, that text is used only to draft an expense you confirm.

• Notifications: local and push alerts for settlement reminders, SMS expense suggestions, smart spending suggestions, invites, and other service messages you enable.

• Offline and local storage: expense caches, SMS deduplication records, pending share drafts, and preference keys may be stored on your device until synced or cleared.

When you use smart capture, the content you submit—typed text, a voice recording, a receipt photo, or text you share into PayYaar from another app—is sent securely to Google's Gemini AI to suggest expense fields such as amount, description, and split type. When you use Item detection, the shopping photo you choose (and optional approximate location or place label for local pricing) is sent to Gemini to identify shoppable items and estimate unit market rates; you review quantities and rates before saving expenses. When you use PayYaar AI Chat, prompts and related context may be sent to Gemini to generate plans or expense drafts. Destination or place searches for trip planning may be sent through our servers to Google Places for autocomplete and place details.

When you enable smart spending suggestions, we may send relevant personal expense history to Gemini to suggest refill, bill, or subscription-style reminders delivered by push. When you request spending-behaviour insights or budget suggestions, we may send relevant personal expense history and related summaries to Gemini to generate tips or budget drafts you can review. AI output is only a suggestion—you always review and choose whether to save or act. Google processes this content as our service provider, and we do not use your AI request content to train our own models.

If you turn on SMS expense alerts, PayYaar uses Android notification access to read text shown in bank debit SMS notifications on your device. PayYaar does not request SMS inbox permission. Parsing and classification (including filtering OTP, promotional, and non-debit messages) happen on your device. We store a short local deduplication record so the same alert is not suggested repeatedly. Unless you confirm and save an expense, the underlying SMS text is not uploaded to our servers. You can disable this feature anytime in Profile.

If you save a UPI ID (manually or by scanning a QR code), we store it with your profile so you and relevant group members can use settlement helpers. Opening a UPI payment deep link sends you to a third-party UPI app; PayYaar does not receive your bank credentials or complete the payment. Settlement reminder pushes use your FCM token and the reminder preferences you set.

When you use India bill pay or recharge features, we collect and store the information needed to initiate payment, show your Transactions history, and support disputes. This includes biller/operator details, account or subscriber parameters, amounts, fees, gateway transaction IDs, payment status, and timestamps. Card, UPI, and net-banking payments are processed by third-party gateways (such as PayU or Razorpay) and licensed BBPS settlement partners. We do not receive or store your full payment card number or CVV on our servers; gateways handle card entry according to their own security standards.

If you report an issue on a transaction, we require a valid email address with your report. We may prefill that field from your account email when one is already available. We store the report text, email, transaction reference, and report time so our team and authorized administrators can review the issue, coordinate with payment partners, and contact you. Do not include card numbers, CVV, or banking passwords in issue descriptions.

When you tap Shop now on an offer, we create a tracked affiliate link that includes an attribution identifier tied to your account (for example your user ID as a partner sub_id) so partners can report conversions. We receive transaction status and commission data from affiliate partners (such as CueLinks) to credit pcoin when cashback is confirmed.

When you unlock a coupon with pcoin, we store the unlocked code and related merchant metadata with your account so you can view it later in My coupons. Visiting a merchant from a coupon listing may use a separate tracked channel that does not earn cashback unless stated in the app.

When you buy a pcoin pack, the app store processes payment. We receive purchase verification data (such as purchase token, order id, product id, and purchase option id) so we can credit the correct pcoin amount to your account, prevent duplicate credits, and handle disputes or refunds. We do not receive your full card number from the store.

Affiliate attribution is necessary to operate Offers and is not a sale of your personal information.

We use information to: provide and operate the Service; authenticate users; sync and back up group, expense, plan, and rewards data; process India bill payments and recharges through third-party gateways and BBPS partners; display your Transactions history; investigate transaction issue reports and contact you at the email you provide; deliver push notifications and reminders you enable; process smart-capture, Item detection, AI Plan, smart-suggestion, spending-behaviour, budget-suggestion, and SMS-suggestion features; attribute affiliate shopping and credit pcoin; verify and fulfill pcoin pack purchases; unlock and display coupons; enforce free-plan, pcoin, and Pro limits; measure and improve our website; detect, prevent, and investigate abuse (including cashback fraud, purchase abuse, and fraudulent transaction reports); troubleshoot and improve reliability; communicate service notices; and comply with legal obligations. We do not sell your personal information.

Depending on your jurisdiction, we process information under one or more legal bases: performance of a contract (to provide the Service), legitimate interests (such as security, fraud prevention, and product improvement), compliance with legal obligations, and consent (where required—for example optional permissions or specific processing).

We share information only as needed to operate the Service:

• Vendors and processors such as Google Firebase (authentication, Firestore, Cloud Functions, push messaging, and App Check), Google's Gemini AI via Firebase AI Logic, Google Places (location lookups for AI Plan), CueLinks and similar affiliate networks (click attribution and cashback reporting), coupon feed partners, telecom/SMS partners used for phone verification, app-store billing platforms, India payment gateways and BBPS partners (such as PayU and Razorpay), website analytics providers (such as Google Tag Manager / Google Analytics and Ahrefs), and support tools.

• Your group members, as part of core product functionality (expenses, splits, settlements, shared plans, and UPI details you choose to make available for settlement).

• Authorized PayYaar administrators and support staff who need access to investigate transaction issue reports, fraud, billing disputes, or legal requests.

• In connection with a merger, acquisition, or reorganization, or when required by law or needed to protect rights, safety, and security.

Merchants you shop with receive whatever information you provide directly on their sites or apps; PayYaar does not control those merchants. Billers and operators receive the account or subscriber details required to fulfill a payment you initiate.

We retain account, group, expense, plan, pcoin ledger, coupon unlock, affiliate click/transaction, bill payment and recharge records, transaction issue reports (including report email and description), and in-app purchase verification records while your account is active and for a reasonable period afterward for backups, fraud prevention, legal compliance, billing disputes, payment partner reconciliation, and dispute resolution. Local SMS deduplication and pending-expense data on your device can be cleared by disabling the feature, clearing app data, or uninstalling the app. Website analytics data is retained according to each provider's settings and our operational needs. When information is no longer needed, we delete or de-identify it within reasonable timelines.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit where appropriate, Firebase App Check, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or port certain personal information, and to withdraw consent where processing is based on consent. You can manage optional features (SMS expense alerts, settlement reminders, smart suggestions, smart capture, Item detection) in the app, revoke device permissions in system settings, and request account deletion via our delete-account page (which covers profile data, pcoin balance including purchased packs, coupon wallet, affiliate click history, bill payment and recharge transaction records, transaction issue reports, purchase verification records tied to your account, and UPI ID as described there). For website analytics, you can use browser controls to block or clear cookies where available. Contact us to submit a privacy request. We may need to verify your identity before fulfilling requests.

The Service is not intended for children below the age at which parental consent is required in the relevant jurisdiction. We do not knowingly collect personal information from such children. If you believe a child provided personal information, contact us so we can take appropriate action.

We and our service providers (including Google Firebase, Google's Gemini AI, Google Places, affiliate partners, and website analytics providers) may process information in countries other than your own, which may have different data protection laws. Where required, we implement appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. We will post updates on payyaar.today and in the app and revise the "Last updated" date. For material changes, we may provide additional notice when required by law.

For privacy questions, rights requests, or complaints, contact us at support@payyaar.today.