Privacy Policy
Last updated: 2026
What we collect
When you create an account, we collect your phone number, business name, and (optionally) your email address and business category. Everything else in IdonPay — your sales, payments, and the names and phone numbers of customers you record as owing you — is business data you enter yourself to keep your own books. We don't collect anything beyond what the app itself needs to work.
Your phone's contacts
If you tap "Choose from Contacts" when recording a customer, IdonPay opens your phone's own contact picker and receives only the one contact you select — never your full contact list.
Notifications
If you allow notifications, we store a device token so our servers can send you payment reminders and account updates. You can turn this off in your phone's settings at any time.
Who else sees your data
We use WhatsApp's Business API (run by Meta) to send verification codes, staff invitations, and reminders you've asked for — this means the message content and your phone number pass through Meta's systems to reach you. If you subscribe to IdonPay Pro, your purchase is processed by Apple's App Store or Google Play (and RevenueCat, which manages that subscription for us) — we never see or store your card details ourselves. We do not sell your personal data to anyone, and we don't use it for advertising.
Where your data lives
Your business records are stored on IdonPay's own servers so you can access them from any device you sign into. They're only ever shown to you (and, for the fields you explicitly grant them access to, any staff accounts you create).
Deleting your data
You can permanently delete your account and every record tied to it at any time from Settings → Delete Account. This can't be undone. See exactly how here.
Changes to this policy
If how IdonPay handles your data changes in a meaningful way, we'll update this page and let you know in the app.