Who we are
NatPay is an app made by Cresentrix Solutions ("we", "us"). We are responsible for the personal information described here. You can reach us at natpay@scriptbrix.com about anything on this page.
This policy covers the NatPay apps for iPhone and Android, the invite pages you open from a NatPay link, and this website.
What we collect
When you sign in
- From Google or Apple: your name, your email address and an account ID that tells us it is you next time. If you use Apple's "Hide My Email", we only receive the relay address Apple gives us. We never receive your Google or Apple password.
- Profile details you add: a phone number, a profile photo and a short bio. All of these are optional.
When you use trips
- Trips you create or join: name, description, cover photo, currency, time zone and the list of members.
- Contributions to the pool, and expenses: description, amount, category, date, who paid, who it was split between, and any receipt photo you attach.
- Approvals, rejections and notes from the trip admin, settlements and whether they are paid or confirmed, and the notifications we show you about all of this.
From your device
- A notification token, so we can send you push notifications if you allow them, plus the device name and type so you can tell your devices apart.
- Biometric sign-in: if you turn on Face ID, Touch ID or fingerprint sign-in, your fingerprint or face never leaves your phone. We only store a random key for that device.
- The device's time zone, used as the default time zone for new trips so expenses land on the right day. We do not collect your location.
- Technical logs: when the app talks to our server, the server records the IP address, time, requested address and app version. We use these to keep the service running and secure.
Camera and photos
NatPay uses the camera and photo library only when you choose to take or pick a photo (a receipt, trip cover or profile photo) or scan an invite QR code. QR codes are read on your phone. Only the photos you choose are uploaded.
Tips
Tips are optional and are paid through the App Store or Google Play. Apple or Google handles the payment. We never see your card or bank details, only that a tip was made.
What we do not collect
No contacts, no location tracking, no advertising IDs, no analytics or tracking tools, and no ads.
How we use it
| Purpose | What we use |
|---|---|
| Run your account and keep you signed in | Name, email, sign-in account ID, device keys |
| Run trips: pools, expenses, splits, reports and settle-ups | Trip and expense information, receipt photos |
| Tell you what changed in your trips | Notification token, notifications |
| Keep NatPay secure and working | Technical logs, sign-in records |
| Answer your questions | What you send us by email |
We use your information to provide the service you asked for, to keep it secure, and where you have agreed, such as notifications and camera access. You can withdraw that agreement at any time in your phone's settings.
We never sell your personal information, never use it for advertising, and never use your trips or receipts to train AI models.
Who can see it
- Members of your trips see your name, profile photo and what you add to that trip: contributions, expenses, receipts, approvals and settlements. People outside the trip cannot see any of it.
- Invite links: anyone who opens an invite link you share sees the trip name, the admin's first name and how many members it has.
- Trip summaries: if you download a PDF summary of a trip, whoever you share it with can read it.
We also use a few service providers who process information for us, only to run NatPay:
- Google: Sign in with Google, Firebase Cloud Messaging for Android and iPhone notifications, Google Play for Android tips, and Google Fonts, which the app uses to load its typefaces.
- Apple: Sign in with Apple, Apple Push Notification service and App Store tips.
- Our hosting provider, whose servers run the NatPay service and store its data.
We may disclose information if the law requires it, or to protect people's safety or NatPay's security. If NatPay is ever sold or merged, this policy would continue to apply to your information, and we would tell you first.
How long we keep it
- While your account is open, we keep your account and trip information so the app works.
- When you delete your account, your email, phone, photo and bio are removed straight away, your name becomes "Deleted user", and your sign-in links, devices and notifications are deleted. You can no longer sign in.
- Shared trip records stay. Expenses, contributions and receipts you added to trips with other people remain in those trips under "Deleted user", so the other members' balances stay correct.
- Technical logs are kept for up to 30 days.
- Backups are kept for up to 90 days and then deleted.
Your choices and rights
- See and correct: edit your name, phone, photo and bio in the app.
- Get a copy: email us and we will send you a copy of your information.
- Delete: delete your account in the app under Settings, then Delete account, or follow the steps on our delete account page.
- Notifications, camera and photos: turn these on or off in your phone's settings at any time.
- Object or complain: email us first and we will try to fix it. You can also contact the data protection authority where you live.
We answer requests within 30 days. We may ask you to confirm your identity, for example by writing from the email address on your account.
Security
Everything between the app and our server is encrypted with HTTPS. Sign-in keys are kept in your phone's secure storage, and only a small number of people at Cresentrix Solutions can access the servers. No system is perfectly secure, so if something goes wrong that affects you, we will tell you and the relevant authorities as the law requires.
Where your information is processed
Our servers and our service providers may process information in countries other than yours. When that happens, we rely on the providers' standard protections for international transfers.
Children
NatPay is meant for adults. If you are under 18, use it only with a parent's or guardian's permission. We do not knowingly collect information from children under 13. If you think a child has given us information, email us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your information in a significant way, we will tell you in the app before it takes effect.
Contact
Questions, requests or complaints: natpay@scriptbrix.com.