Privacy Policy

Last updated: 30 October 2026

Paary is built on a simple stance: your financial life is yours. We don't connect to your bank, we don't sell data, and we don't show ads. This page explains, in plain language, what we do store and why.

Who we are

Paary is operated by Leadnext Solutions - FZCO, Dubai Silicon Oasis, IFZA Premises, Dubai, UAE. Contact: hello@paary.app

What we store

Your account: email address, password (stored as a hash, so we never see it), your chosen display name, colour, language, and currency, and, if you add one, a profile photo (visible to the members of your household).

What you enter: transactions, budgets, categories, wallets, to-dos, and household membership. In short, the content you and your partner create in the app. You type it in yourself; Paary never connects to your bank account and never reads your bank data.

Between partners. For each wallet you own alone, you choose one of three levels: Private (only you see it), Exists (your partner sees its name, no amounts) or Balance (your partner sees its name and balance, not the transactions). The level itself is visible only to you. Entries are seen by the wallet's owners. An entry reaches your partner only when it concerns them: a shared cost, something paid by or for them, or an entry on a wallet you own together. A wallet you own together is visible to both owners. These rules are enforced on our servers, not only in the app, and apply equally to the data export and to notifications.

Technical: a push-notification token for your device (if you enable notifications), crash reports (what went wrong in the app, the app version, your device model and your member id, so we can fix it), and standard technical logs needed to run the service securely.

Where it lives

Your data is stored with Supabase on servers in the EU (Frankfurt, Germany).

Who helps us run Paary (processors)

• Supabase: database and authentication (EU region, Frankfurt, Germany)
• Expo: delivery of push notifications to your device
• Apple and Google: billing for subscriptions bought in the App Store or on Google Play, and delivery of push notifications to your device (Apple Push Notification service, Firebase Cloud Messaging)
• RevenueCat: keeps track of your household's subscription; receives your account id (a random identifier, not your name or email) and the purchase records from the App Store, Google Play and Paddle
• Paddle: our merchant of record for purchases on paary.app. Paddle handles checkout, billing, invoices and VAT for subscriptions bought on the web, and receives the data needed to process your payment. We never see your card details
• Sentry: crash reports from the app, processed in the EU (de.sentry.io)
• Resend: delivery of account emails (e.g. password reset codes) from servers in the European Union; Resend receives your email address and the message content
• Vercel: hosting of this website (paary.app); receives the technical data of your visit (such as your IP address) needed to deliver the pages

We share data with these providers only to the extent needed for the service, and with no one else. We do not sell personal data. We do not show ads.

Cookies

This website sets one cookie of its own, NEXT_LOCALE, and only when you choose a language with the language selector: it remembers that choice for one year. We use no advertising or analytics cookies.

Why we're allowed to process it (legal bases)

Under the GDPR, we process your data on these bases: performance of our contract with you, covering your account, households, budgets and the notifications you enabled (Art. 6(1)(b)); legal obligations such as invoicing records (Art. 6(1)(c)); and legitimate interests in keeping the service secure and preventing abuse (Art. 6(1)(f)). Where we ever rely on consent (e.g. optional emails beyond service messages), you can withdraw it anytime.

International transfers

Your core data stays in the EU (Frankfurt). Some of our providers process limited data outside the EU. For example, Expo (push delivery), RevenueCat and Vercel may process data in the United States, Apple and Google process purchases and push delivery under their own privacy policies, and Paddle processes payment data per its own privacy policy. Where data leaves the EU, it does so under recognised safeguards such as the EU Standard Contractual Clauses or an adequacy decision (e.g. the Data Privacy Framework between the EU and the US, where the provider is certified).

How long we keep it

As long as your account exists. When you delete your account (Settings → Your data → Delete account), your personal data is removed per the process described in the app; some minimal records (e.g. invoices held by Paddle) are kept where the law requires it.

Your rights

You can access, correct, export and delete your data. The two big ones are built directly into the app:

• Export your data: in Settings, available to everyone, always (also when a subscription has ended)
• Delete your account: in Settings, likewise always available

For anything else (access, correction, objection, complaint) write to hello@paary.app. You also have the right to lodge a complaint with your local data-protection authority.

Children

Paary is not directed at children under 18.

Changes

If this policy changes in a way that matters, we'll tell you in the app or by email before it takes effect.