Payloat · Last updated: July 18, 2026
Payloat ("Payloat," "we," "us") is a personal-finance app that helps you track your purchases, subscriptions, refunds, returns, and upcoming charges. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Payloat mobile app and related services (the "Service"), operated by Payloat.
We built Payloat around a simple principle: your financial data is used only to power features you see in the app. We never sell it and never use it for advertising.
When you sign in with Google, we receive your name, email address, and Google account identifier to create and secure your account. Authentication is handled by Google and by our backend provider (Supabase).
If you choose to connect your Google account with read access to Gmail
(gmail.readonly), Payloat scans only purchase-related messages
(order confirmations, receipts, invoices, subscription and BNPL notices) to
extract structured details: merchant, amount, dates, category, and
return/refund/renewal information. We store only these extracted fields — we do
not retain the raw content of your emails. Your Google authorization token is
stored securely on our servers and is never placed on your device.
If you link a financial account, we use Plaid Inc. to connect to your bank or card issuer and retrieve transaction history (merchant, amount, date, and category). You authorize this connection through Plaid's own secure flow; your bank login credentials are handled by Plaid and are never seen or stored by Payloat. The long-lived access token Plaid issues is stored only on our servers, never on your device. Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
If you enable Apple Wallet sync, Payloat reads eligible card transactions from the Wallet app entirely on your device, with your permission, using Apple's FinanceKit. This data is processed locally to display your transactions and detect subscriptions; it is never transmitted to our servers or to any third party, and it is stored in an encrypted, app-private location on your device.
Purchases, notes, and profile details (such as your name) that you add manually.
Basic diagnostic and reliability information needed to operate the app (for example, error logs). We do not use third-party advertising or cross-app tracking SDKs.
We do not sell your personal information, and we do not use your financial or email data for advertising or to build advertising profiles.
To turn a receipt or transaction into structured data (merchant, amount, kind), we use automated parsing. Where this involves a third-party AI/model provider, we send only the minimum content needed for extraction, under agreements that prohibit using your data to train their models and, where available, provide zero data retention. This applies to email content processing only; Apple Wallet data is never sent off your device.
We share information only with service providers that help us run the Service, and only as needed to provide it:
We may also disclose information to comply with the law or a valid legal request, to protect rights and safety, or in connection with a merger or acquisition (with notice to you). We never sell your personal information.
We keep your information for as long as your account is active or as needed to provide the Service. You can:
Depending on where you live (including under GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, or port your personal information, to withdraw consent, and to object to certain processing. To exercise any of these, contact us at hello@payloat.com. We will not discriminate against you for exercising your rights.
Payloat is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.
We operate the Service from, and store data in, the United States. If you access Payloat from outside the U.S., you understand your information may be processed in the U.S., where data-protection laws may differ from those in your country.
We may update this policy from time to time. We will post the new version here with an updated date and, for material changes, provide additional notice within the app.
Questions or requests: hello@payloat.com
Payloat, governed by the laws of the United States.