Privacy Policy

Who we are

Pay Pong is operated by Evko Development LLC. This policy explains how we handle information when you visit paypong.app, create an account, join a group, or use Pay Pong's features. Contact us at support@paypong.app with privacy questions or requests.

Information we collect

• Account information: your name, email address, sign-in identifier, profile photo or avatar, plan status, and notification preference. Better Auth handles email and password sign-in. Your password is stored as a secure hash, never as plain text.
• Group information: group names and images; member and guest names; invitation email addresses; who paid, when, where, and how much; and receipts or images you choose to save with a turn.
• Billing information: your plan, subscription status, and Stripe customer and subscription identifiers. Stripe collects and processes payment details at checkout; Pay Pong does not store payment card numbers.
• Usage and technical information: basic product events, page paths, campaign parameters, the referring site's hostname, and standard service logs needed for security and troubleshooting. Infrastructure logs may include an IP address, browser details, and requested URLs. We keep a first-visit attribution record in your browser.

How we use information

We use this information to create and secure accounts, maintain group turn history, calculate who is next, send invitations and opted-in reminders, process receipt scans, provide Premium features, answer support requests, understand whether the product is working, and prevent abuse.

Receipts and AI scanning

If you choose to scan a receipt, Pay Pong sends that image to xAI's Grok API to suggest the restaurant name and total. You can correct the suggested details before saving. A receipt image is saved with a group turn only if you choose to include it. Avoid uploading sensitive information that is not needed for the turn.

Who can see group information

Signed-in members of a group can see its shared details and turn history. A group owner can create a revocable live status link. Anyone with that link, including a third-party assistant you give it to, can see the group name, participant first names, who paid last, who is next, turn count, and update date without signing in. The live status view does not show email addresses, amounts, receipts, avatars, or account IDs. Treat the link as private because a recipient can forward it. If an owner leaves a shared group, the link may remain active until the new owner revokes it.

Service providers and other disclosures

We use Cloudflare Workers and D1 to run the service and store app data; Better Auth for email and password sign-in; xAI for optional receipt scanning; Cloudflare for email delivery; and Stripe for Premium billing. These providers process information needed to perform those services. We may also disclose information when required by law or to protect users and the service. We do not sell personal information.

Browser storage and analytics

Pay Pong uses browser storage to keep sign-in state, a draft group setup, and first-visit campaign information. We record limited first-party events such as a demo start, group creation, or checkout start. Campaign data may include the landing path and referring hostname, but not the full referring URL. Your browser controls can clear local storage, although doing so may sign you out or remove an unsaved draft.

Retention, deletion, and your choices

You can edit your profile and turn off weekly email notifications in Pay Pong. You can delete your account from your profile, or contact support@paypong.app for help accessing, correcting, or deleting information. Account deletion removes your profile, authentication account, invitations, and membership. If other members remain in a group, its shared turn history may remain available to them; groups with no remaining members and their turns are removed. Billing records, provider records, backups, and limited security or diagnostic logs may remain for legitimate operational or legal reasons.

You can ask a group owner to revoke a live status link. If you invited someone by email, the invitation is used to help them join the group. Contact us if an invitation or a guest entry needs correction or removal.

Security and children

We use access controls and other reasonable safeguards, but no online service can guarantee absolute security. Pay Pong is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can address it.

Changes and contact

We may update this policy as Pay Pong changes. We will post the revised version here with a new update date and provide additional notice when appropriate. For privacy requests or questions, email support@paypong.app.