Your money is yours. So is your data.

We only collect what we need to run a payments app you can rely on. That falls into a few clear categories:

We collect some of this directly from you when you use Dupay, and some automatically through your device once you grant the relevant permission. You can review and change every permission at any time in your device settings.

Every use below maps back to running the app well and keeping it safe. We don't repurpose your data for anything you wouldn't expect.

• To operate core features — sending, receiving, and managing payments
• To verify your identity and prevent fraud, unauthorized access, and abuse
• To personalize your experience based on your account and preferences
• To maintain, secure, and troubleshoot the app, including diagnosing crashes
• To understand how the app is used so we can improve it over time
• To communicate with you about your account, transactions, and important updates
• To meet our legal, regulatory, and financial-compliance obligations

Dupay relies on a small set of trusted providers to function. We use analytics tools such as Firebase and Google Analytics to understand app performance and usage, and we work with payment and infrastructure partners to process transactions and host the service. These providers may handle device and usage data on our behalf and process it under their own privacy policies.

We do not use Dupay to serve advertising, and we do not work with third-party advertising networks. Your activity in the app is never sold to advertisers or used to target ads to you.

We do not sell your personal information — full stop. We share it only in these limited circumstances:

• With service providers, such as our analytics, payment, and hosting partners, who process data on our behalf under contract
• When required by law, regulation, legal process, or a valid governmental request
• To protect the rights, property, or safety of Dupay, our users, or the public — for example, to investigate fraud
• In connection with a merger, acquisition, or sale of assets, with notice to you where the law requires it

Dupay may request access to your device's location, camera, photo library, microphone, and contacts. These permissions are optional and tied to the specific feature that needs them. Declining a permission may limit that one feature, but it will not stop you from using the rest of the app. You can grant or revoke any permission at any time from your device settings.

We keep your information for as long as your account is active or as needed to provide the app's features. When you delete your account, we permanently delete your personal information — except where we are legally required to retain certain records, such as transaction data we must hold for financial, accounting, tax, or anti-fraud purposes. In those cases, we keep only what the law requires, for only as long as it requires, and then delete it.

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and restricted access to systems that hold personal data. No method of transmission or storage is ever completely secure, so while we work hard to protect your data, we can't guarantee absolute security. If we ever become aware of a breach affecting your information, we will act promptly and notify you where the law requires.

• Access, update, or correct your account information from within the app or by contacting us
• Delete your account and associated data at any time — see our account deletion page for the steps
• Revoke location, camera, microphone, or contacts permissions whenever you like in your device settings
• Request a copy of your data, or object to or restrict certain processing, where applicable law gives you that right

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, contact us using the details below — we'll respond within the timeframe the law allows.

Dupay and our service providers may process and store your information in countries other than the one you live in. Wherever your data is handled, we take steps to ensure it receives a level of protection consistent with this policy and applicable law, including using appropriate safeguards for cross-border transfers where required.

Dupay is intended for a general adult audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will remove it promptly.

We may update this privacy policy from time to time as the app evolves or the law changes. If we make material changes, we'll update the effective date at the top of this page and, where appropriate, notify you through the app before they take effect. We encourage you to review this page periodically.

↑ Back to top