Privacy Policy

What PaidOut is

PaidOut is a family allowance platform. A parent or guardian (the allocator) sets a starting amount, records bonuses and deductions throughout a cycle, and the remaining balance is released to a child (the recipient) at cycle end. Recipients can view their balance and transaction history in real time.

Information we collect

• Account information — name, email address, and password when you sign up.
• Family data — family name, recipient names, payout amounts, and transaction records you create inside the app.
• Payment method handles — optional Venmo usernames, Cash App cashtags, PayPal usernames, or Zelle contact information you enter to pre-fill payout buttons. PaidOut does not process payments; these are used only to open third-party payment apps.
• Push notification tokens — if you grant notification permission, we store a device token to deliver payout and balance alerts.
• Usage data — standard server logs (IP address, browser/device type, pages visited) retained for up to 90 days for security and debugging.

How we use your information

• To provide, operate, and improve the PaidOut service.
• To send transactional notifications (payout ready, balance changed, cycle ended).
• To process subscription billing through Stripe.
• To respond to support requests.
• To detect and prevent fraud and abuse.

We do not sell your personal information. We do not use your data for advertising.

Children's privacy

Recipient (child) accounts are created and managed by a parent or guardian. We do not knowingly collect personal information directly from children under 13. Child accounts contain only a display name, an optional username, and payout records entered by the allocator. If you believe a child account was created without parental consent, contact us at privacy@paidoutapp.com and we will delete it promptly.

Data sharing

We share data only with the service providers necessary to operate PaidOut:

• Supabase — database and authentication hosting.
• Stripe — subscription billing. Stripe's privacy policy governs payment data.
• Resend — transactional email delivery.
• Vercel — web hosting and serverless functions.
• Expo / EAS — mobile app build and push notification delivery.

We do not share your data with advertisers, data brokers, or any other third parties.

Data retention and deletion

Your data is retained for as long as your account is active. You may delete your account at any time from the Settings page, which permanently removes your family data, recipient profiles, and transaction history. Billing records required for legal compliance are retained for 7 years per standard accounting requirements.

Security

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Row-level security policies on our database ensure that each family can only access their own data.

Your rights

You may access, correct, or delete your personal information at any time through the app settings or by emailing privacy@paidoutapp.com. If you are in the EEA or California, you have additional rights under GDPR and CCPA respectively — contact us to exercise them.

Changes to this policy

We will notify active users by email and in-app notice if we make material changes to this policy. Continued use of PaidOut after the effective date constitutes acceptance.