The short version
- Your records stay with you
- Your expenses, subscriptions, budgets and to-dos are stored on your device. They are never sent to us.
- An account is optional
- Use Payvora as a guest, or sign in with your Payverly account. If you do, we hold your name, email address and sign-in details.
- Ads keep it free
- Payvora shows ads from Google AdMob and uses Amplitude to understand how the app is used. Neither receives your financial records. See section 6.
- We don't sell it
- We do not sell your data or share it with data brokers.
- You can delete it
- Settings → Delete account erases your account and the records on that device. Your account is shared with Payverly, so this deletes it there too. You can also request deletion without the app.
1. Who we are
Payvora is a personal finance app for tracking expenses, subscriptions, budgets and money to-dos. It is published by AVMDEVS LLC ("we", "us"), which also makes the invoicing app Payverly. This policy covers the Payvora app on iPhone, iPad and Android.
Payvora signs in with a Payverly account, the same account used by the Payverly app. Account data is handled as described here; anything you do in the Payverly app itself is covered by Payverly's privacy policy.
For anything in this policy, contact privacy@payverly.app.
2. What stays on your device
Everything you record in Payvora is stored in the app's own storage on your phone or tablet, and is not sent to our servers:
- Expenses: title, amount, category, date and notes.
- Subscriptions, budgets (including how they repeat), money to-dos and your categories.
- Your display currency and your light or dark preference.
Because of this, your records do not sync between devices and we cannot restore them for you. Signing in, signing out or creating an account does not change them. They are erased when you use Settings → Clear all data, choose to remove them when signing out, delete your account in the app, or uninstall the app.
If your device's own backup is turned on (iCloud on iPhone and iPad, Google backup on Android), your operating system may include the app's storage in that backup, under Apple's or Google's terms.
When you export to CSV, the file is created on your device and handed to your system share sheet; it goes only where you choose to send it.
3. What we collect
If you use Payvora as a guest
- A random identifier created on your device for this installation. It names a guest account on our server so your session works across app launches. No name or email is involved.
If you create or sign in to an account
- Your name and email address.
- Your password, stored by the Payverly account service only as a salted hash — we cannot read it.
- If you sign in with Google (or Sign in with Apple on iPhone and iPad): the identifier that provider gives us, plus the name and email they release to us. We never receive your Google or Apple password.
- If you reset your password: your email address, to which we send a one-time code.
Support
- The subject and contents of any support request you send from the app, and our replies. They are stored with your account and marked as coming from Payvora.
Device and technical data
- If you allow notifications: a push token from Firebase Cloud Messaging, the installation identifier above and your platform (iOS or Android), linked to your account so notifications reach this device. They are removed when you sign out or delete your account.
- App usage events sent to Amplitude — see section 6.
- Data used by Google AdMob to show ads — see section 6.
- Standard server logs, including your IP address, when the app talks to our servers. They are used for security, abuse prevention and debugging.
Content the app loads
- Exchange rates for the currency converter come from the public Frankfurter service (European Central Bank reference rates). Your device asks it for the two currencies you are converting; like any website, it sees your IP address. No account information is sent.
- Promotional banners and articles are loaded from our servers. Tapping a banner may open a web page in the app or your browser.
Payvora does not collect your financial records, bank or card details, contacts, photos or precise location, and it does not connect to bank accounts or move money.
4. Why we use it
| Purpose | What it uses | Legal basis (EEA/UK) |
|---|---|---|
| Run your account or guest session | Name, email, password or social identifier; guest identifier | Performance of a contract |
| Reset your password | Email address, one-time code | Performance of a contract |
| Send notifications you have allowed | Push token, installation identifier | Consent (you can turn it off) |
| Answer your support requests | Request contents, account email | Performance of a contract |
| Keep the service secure and prevent abuse | Server logs, IP address | Legitimate interests |
| Understand how the app is used so we can improve it | App usage events | Legitimate interests |
| Show ads, which is how the app stays free | Advertising identifier, ad requests | Consent where required |
5. Who we share it with
We do not sell your data. We share it only with the service providers that make specific features work, and only the data each one needs:
| Provider | What it is for | What it receives |
|---|---|---|
| Google (Firebase Cloud Messaging) | Delivering push notifications | Push token, notification contents |
| Google (AdMob and its consent form) | Serving ads; asking for ad consent where required | Advertising identifier where available, IP address, device information, ad interactions |
| Google (Sign-In) | Signing in with Google, if you choose it | The sign-in request; Google tells us your identifier, name and email |
| Apple (Sign in with Apple) | Signing in with Apple, if you choose it | The sign-in request; Apple tells us your identifier and, if you allow it, name and email |
| Amplitude | Product analytics | App usage events and your account identifier |
| Brevo | Sending account email such as password-reset codes | Your email address and the contents of that message |
| Frankfurter (exchange rates) | Currency converter rates | The currency pair requested and your IP address |
| Our hosting provider | Running the servers and database for accounts | Stores the account data described in this policy |
We may also disclose data where we are legally required to, or where it is necessary to protect our rights or someone's safety. If Payvora is ever transferred to another company, your data may transfer with it, and we will tell you before that happens.
6. Ads, consent and analytics
Payvora is free, with no subscription and nothing to buy in the app. Ads are how it is funded: a banner at the bottom of the main screens, and occasionally a full-screen ad between screens — never at launch, during sign-in or while you fill in a form.
In the EEA, the UK and Switzerland, Google's consent form appears before any ad is requested, and you can change your choice at any time from Settings → Ad privacy choices. If you do not consent, ads that use personal data are not shown.
On iPhone and iPad, Apple's advertising identifier is used only if you allow tracking when asked. Without that permission, ads are chosen from context and coarse signals rather than a cross-app profile.
On Android, Google may use your device's advertising ID to choose and measure ads. You can reset it or turn off ad personalisation in your Android settings (Settings › Google › All services › Ads, or Settings › Privacy › Ads, depending on your phone).
Analytics tell us which screens are opened and which actions succeed or fail, linked to your account identifier, how you signed in and whether you are a guest. Some events carry a detail that helps us read them — the category you chose for an expense, how often a subscription repeats, whether a budget repeats, a to-do's priority or status, your display currency. They never include amounts, titles or notes. Amplitude's software also records standard device and app details, such as device model, operating system and app version.
7. How we protect it
- Your financial records never leave your device, so they are protected by your device's own lock and encryption.
- All traffic between the app and our servers is encrypted in transit using HTTPS/TLS.
- Your session token and installation identifier are kept in the device's secure storage — the iOS Keychain or the Android Keystore — and are not carried over to another device.
- Passwords are stored only as salted hashes.
- Every request for account data is checked against your signed-in session on the server.
No system is perfectly secure. If we ever discover a breach affecting your data, we will notify you and the relevant authorities as required by law.
8. How long we keep it
We keep your account for as long as it exists. Records on your device stay there until you remove them (section 2).
When you delete your account (Settings → Delete account, or by request):
- Your account is erased from our database. Because it is a shared Payverly account, this also erases anything you stored in the Payverly app.
- Your support requests and push registrations are deleted, so notifications stop.
- When you delete from the app, Payvora also erases the records on that device. If you ask us by email instead, uninstall Payvora or use Clear all data to remove them — we never had a copy.
- We keep a minimal deletion record: your former account identifier, how you signed in and the dates the account was created and deleted — no name, email address or password.
- Ordinary backups and server logs age out on their normal cycle, so a copy may persist briefly in them after deletion.
9. Your rights and choices
In the app, at any time, you can:
- Export your records as CSV files, from Tools → Export.
- Change your name or password, from Settings.
- Turn notifications off, in your device settings.
- Change your ad consent (EEA, UK, Switzerland), from Settings → Ad privacy choices.
- Clear your records or delete your account, from Settings — or request deletion without the app.
Depending on where you live, you may also have the right to access a copy of your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we relied on it. To exercise any of these, email privacy@payverly.app. We will respond within the time your law requires, and we will not charge you or reduce your service for asking.
If you are in the EEA or UK and are not satisfied with our response, you may complain to your local data-protection authority.
10. Children
Payvora is a personal finance tool for adults and is not directed at children. We do not knowingly collect data from anyone under 13 (or the minimum age in your country). If you believe a child has created an account, contact us and we will remove it.
11. Changes to this policy
If we change how we use your data, we will update this page and the "last updated" date above. For a significant change we will tell you in the app before it takes effect.
12. Contact
Questions, requests, or anything in this policy that does not match what you see in the app:
- Email: privacy@payverly.app
- In the app: Settings → Help & support