Privacy Policy

• You sign in with Google. Piepaye never sees or stores a password.
• Your financial data is visible only to your account.
• No third-party analytics, no advertising, no tracking cookies. Your data is never sold or shared for marketing.
• Piepaye’s administrator can see your account details and usage activity (for example, how many transactions you have and which days you were active), never your financial records themselves.
• You can export your transactions, and delete your account and all of its data yourself, at any time.

Sign-in information. When you continue with Google, Google shares your email address (and whether it is verified), your name, your profile picture and an account identifier with Piepaye’s sign-in provider, Supabase. Supabase also keeps a record of your sessions: when they started, the IP address and the browser that was used.

Your profile and settings. Your name (as Google provides it, and as you change it in Settings), your currency and your time zone.

The financial information you enter. Financial accounts (names, types, opening balances and credit limits), transactions (amounts, dates, descriptions, notes, categories and the accounts or investments involved), categories, budgets, recurring transactions, and investments (names, platforms, types, amounts invested, current values, notes and the history of values you record). Piepaye doesn’t connect to your bank and doesn’t collect bank or card numbers; it only knows what you type.

Usage records. Piepaye notes the days you open it while signed in (one entry per day, with no detail of what you looked at) and each time you export, or are refused an export by the limit below. To limit how often the spreadsheet export can be run, it also counts your exports in ten-minute windows. If you try to open Piepaye’s administration area without access, that attempt is logged against your account.

In your browser only. Your light/dark preference, which ledger columns you hide and the account you last used are kept in your browser’s local storage and never sent to Piepaye.

To run Piepaye for you: to sign you in, to show your ledger, balances, budgets and investments, and to create the exports you ask for. And to operate and improve the service: to understand how Piepaye is used, overall and per account, through counts and activity, never the content of your records (see below). Your data isn’t used for advertising or profiling, isn’t sold, and isn’t shared with anyone for their own purposes.

Piepaye has an administration area, open only to its authorised administrator (Sai Swarup). It exists to operate and improve the service. Through it, Piepaye processes and the administrator can see:

• Account and profile information: your name, email address, how you sign in, when you signed up and last signed in, and whether your account is active.
• Activity information about your account: which days you were active (opened Piepaye while signed in), how many of each kind of record you have and how many you created in recent periods (for example, the number of transactions, financial accounts, categories, budgets, investments, recurring transactions and exports), week-by-week counts of that activity, and which features you have used.
• Product usage across all accounts: numbers of users and active users, sign-ups, feature adoption, transaction counts, how often Piepaye’s default categories are used, retention and other operational figures. These are shown however few people use Piepaye, so with a small number of users they can describe one person’s usage.

Individual financial records are not accessible to administrators through the administrative interface. That covers transaction details, amounts, descriptions and notes, and the dates of individual transactions; account and credit-card balances; investment values and holdings; budget amounts and details; recurring transaction details; reports; and exported data. The names you give your own categories aren’t shown either: categories you create are only counted.

This usage and activity information is calculated from the records in Piepaye’s own database and is linked to your account. It is not anonymous. No outside analytics service is involved. Access to the administration area (including refused attempts) and every change made there are logged.

• Supabase hosts Piepaye’s database and handles sign-in. Your data is stored in Supabase’s Mumbai (ap-south-1) region.
• Vercel hosts the website; Piepaye’s server functions run in its Mumbai region. Like any web host, it processes the requests your browser makes, including your IP address, and keeps request logs.
• Google handles signing in when you choose “Continue with Google”, under Google’s own privacy policy.

These providers process data to run the service and are governed by their own terms and privacy policies. Piepaye uses no other third-party services: no third-party analytics, error-tracking, advertising or AI services, and its fonts are served from Piepaye itself.

Piepaye uses only the cookies needed to keep you signed in (a session cookie set by Supabase’s sign-in library, and a short-lived one used while signing in with Google). There are no analytics, advertising or tracking cookies.

Every connection is encrypted (HTTPS). The database itself enforces that each record belongs to exactly one account and can be read or changed only by that account, whatever the app asks for. More detail is on the Data & security page. No system is perfectly secure, and Piepaye’s data is not end-to-end encrypted.

When you export your ledger, the spreadsheet is created on request and downloaded straight to your device. Piepaye doesn’t keep a copy. Once downloaded, keeping the file safe is up to you.

Your data is kept until you delete it. Settings → Delete account permanently removes your account and everything in it: transactions, financial accounts, categories, budgets, recurring transactions, investments and their history, your profile and settings, your usage records and export counter, your sign-in record and sessions. It happens immediately and can’t be undone, so export first if you want a copy.

Records outside Piepaye’s database, such as the hosting providers’ request logs, Supabase’s sign-in logs and any infrastructure backups, are kept and removed according to those providers’ own retention policies. Entries in Piepaye’s administration log that refer to your account lose that link when the account is deleted.

• See and take your data: everything is visible in the app, and the export gives you a spreadsheet of your transactions with a summary report (totals, categories and account balances). Budgets, recurring transactions and investment details aren’t part of the export yet.
• Correct it: edit any entry or your profile at any time.
• Delete it: delete individual entries, or your whole account, yourself.

Depending on where you live, you may have further rights under local data-protection law.

Piepaye is for people aged 18 or over. It isn’t directed at children and shouldn’t be used by anyone under 18.

If Piepaye starts storing or using data differently, this page and the date at the top will be updated before the change takes effect.

Questions or requests about your data: piepaye.support@gmail.com. This inbox is read by Sai Swarup, not a staffed support desk, so replies can take a few days. Please don’t send passwords or financial details by email.

You can also do most things yourself in the app: export your transactions from the ledger, edit any entry, and delete your account in Settings.