Aspayr provides personal finance tools, open banking connectivity, identity verification, subscriptions, and AI-assisted product features. If you have questions about this policy or want to exercise privacy rights, contact product@aspayr.me.

We collect account and profile information such as your name, email address, account identifiers, country, phone number, and authentication details received from Google, Apple, or Microsoft.

When you connect financial institutions through Yapily, we collect and process account, balance, consent, institution, transaction, category, and related financial metadata.

For identity verification and compliance, Didit may process identity document images, liveness or selfie captures, verification outcomes, and related audit records on our behalf.

We also collect device, application, diagnostic, security, and support information needed to operate, secure, troubleshoot, and improve the service.

We collect information directly from you, from your use of the app or website, from authentication providers, from open banking and identity verification providers you choose to connect, and from internal service logs and analytics generated during use of the platform.

We use personal data to create and manage accounts, authenticate users, verify identity, connect banks, display balances and transactions, deliver subscription features, generate analytics and financial summaries, operate AI-assisted product features, prevent fraud, investigate misuse, satisfy legal and regulatory obligations, and provide customer support.

Aspayr offers AI-assisted features such as home briefings, financial summaries, chat, voice assistance, and notification insights. When these features are used, Aspayr may send relevant personal and financial data to Microsoft Azure AI services in order to generate the requested output. Depending on the feature, this may include account context, balance information, transaction history, financial categorisations, user prompts, and derived summary data needed to produce a response or insight.

We use this processing only to operate and improve the AI-assisted feature requested by the user or activated within the product experience. We do not sell personal data for advertising purposes.

We share personal data with service providers that support operation of Aspayr, including Google, Apple, and Microsoft for authentication, Yapily for open banking connectivity, Didit for identity verification, and Microsoft Azure AI services for AI-assisted features. We may also share information with hosting, infrastructure, security, and support vendors where reasonably necessary to run the service. We may disclose information where required by law, regulation, legal process, or to protect users, Aspayr, or the public.

Aspayr requires service providers that process personal data on its behalf to handle that data under contractual, technical, and organisational safeguards appropriate to the nature of the information and the purposes described in this policy.

We retain personal data only for as long as necessary to provide the service, maintain records, handle disputes, secure the platform, and comply with legal, tax, accounting, audit, and regulatory obligations. Retention periods vary according to data type and legal requirements.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You may also have rights related to consent-based processing. Requests may be sent to product@aspayr.me.

We use administrative, technical, and organisational measures designed to protect personal data, including access controls, encrypted communications, credential protections, audit logging, and monitoring.

Aspayr is not directed to children under 14 and we do not knowingly collect personal data directly from children.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date shown on this page and, where appropriate, provide additional notice.