Short version: Paidly.to stores your bill data on your device only. We use Plaid to read your bank data with your permission. We never sell your data, and you can delete everything at any time from inside the app.
Paidly.to ("Paidly.to," "we," "us," or "our") is an independent iOS application that helps individuals track recurring bills and payment due dates. We are not affiliated with any bank, financial institution, or financial services provider.
If you have questions about this Privacy Policy, contact us at privacy@paidly.to.
When you add bills manually or import them from your bank, Paidly.to stores the following information locally on your device only, encrypted using SQLCipher (AES-256):
This data is never transmitted to our servers and is not accessible to us.
If you choose to link a bank account, Paidly.to uses Plaid, a trusted financial data network, to access your bank information on your behalf. When you connect a bank, Plaid may access:
Bank linking is entirely optional. You may use Paidly.to without connecting any bank account.
Plaid's handling of your data is governed by Plaid's End User Privacy Policy. We encourage you to review it.
Paidly.to requires a small backend server exclusively because of how Plaid's API works — not by choice. Plaid's security model requires that your bank connection credentials (called access tokens) be held on a server, never inside a mobile app. Every call to retrieve your bank data must be made server-side using both your connection token and Paidly.to's own Plaid credentials. There is no architecture where a mobile app can fetch data directly from Plaid without a server in the middle.
Because of this requirement, our server stores only:
These tokens are stored in an encrypted PostgreSQL database (AES-256-GCM) on Render (our hosting provider). We do not store your actual bank account numbers, full transaction history, or any personally identifiable information on our servers. If you do not link a bank account, nothing is stored on our server at all.
Paidly.to does not collect:
We use the information described above solely to provide the Paidly.to service, specifically to:
We do not use your financial data for credit scoring, underwriting, employment screening, tenant screening, advertising, or any other purpose beyond the bill-tracking service you requested.
We do not sell, rent, or share your personal or financial data with any third party, except as follows:
When you link a bank account, we share your request with Plaid so that Plaid can retrieve the relevant bank data. Plaid acts as an independent data processor and is governed by its own privacy policy.
Our server runs on Render (render.com). Render hosts our API server and PostgreSQL database. Render may have incidental access to server data in the course of providing hosting services. Render's privacy policy governs their data handling.
We may disclose information if required by law, regulation, court order, or government authority, or to protect the rights, property, or safety of Paidly.to, our users, or the public.
We take the security of your data seriously:
No method of transmission or storage is 100% secure. If you believe there has been a security incident involving your Paidly.to data, please contact us immediately at privacy@paidly.to.
You can disconnect any linked bank account at any time from Settings → Connected Banks → Remove. This deletes the Plaid access token from our server and removes all bills associated with that account from your device.
To also remove your connection from Plaid's systems, visit my.plaid.com.
You can permanently delete all bill data and bank connections at once from Settings → Delete All My Data. This action cannot be undone.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
To exercise any of these rights, contact us at privacy@paidly.to. We will respond within 45 days.
Paidly.to is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to us, please contact us at privacy@paidly.to and we will promptly delete it.
The app may display links to biller payment websites or allow you to open your bank's app. These third-party services have their own privacy policies, and we are not responsible for their data practices.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will provide notice through the app. Your continued use of Paidly.to after any changes constitutes acceptance of the updated policy.
For any privacy-related questions, data requests, or concerns, please contact:
Paidly.to
Email: privacy@paidly.to
Response time: within 10 business days