Repaya Friendly personal loan tracking
Private beta Join the waitlist

Privacy policy

A plain-language view of the data Repaya uses.

Repaya is designed for shared clarity, not data overreach. This policy outlines the information we collect to run the product, how we use it, and where service providers fit into the picture.

Last updated March 8, 2026
Contact [email protected]
No payment processingNo bank or card storageNo sale of personal information todayQuestions: [email protected]

Summary

The short version

We collect the account, marketing signup, loan, payment, reminder, and security information needed to operate Repaya, keep the service safe, and support lenders, borrowers, and product communications.

  • Repaya stores tracking and audit data, not payment credentials.
  • Service providers help with auth, hosting, email delivery, analytics, and marketing subscriptions.
  • You can update data in-app, unsubscribe from marketing messages, and request deletion or export support.
Section 1

Overview

Repaya helps families and friends track informal loans. This policy explains what data we collect, how we use it, and the choices you have.

Section 2

Information We Collect

  • Account data: email address, Clerk user ID linkage, and authentication or session data handled by our auth provider. We do not store your password.
  • Profile data: lender name, borrower-facing name, timezone, and optional payment handles such as Venmo or PayPal.
  • Loan data: loan titles, amounts, schedules, notes, and borrower-facing details you enter.
  • Borrower contact data: borrower email addresses you provide for reminder notifications.
  • Payment tracking data: payment amounts, dates, and notes you record.
  • Marketing and mailing list data: email address and signup source details when you subscribe to beta updates or marketing messages on Repaya properties.
  • Feedback and support data: the contents of messages, support requests, or feedback links you open or submit.
  • Usage, analytics, and security data: IP address, user agent, device or browser information, page and event activity, and request metadata used to operate the service, measure performance, and prevent abuse.

We do not collect bank account numbers or card details, and we do not process payments.

Section 3

How We Use Your Information

  • Provide and maintain the Repaya service.
  • Authenticate users and keep sessions secure.
  • Display and organize your loans, payments, and lender settings.
  • Send reminder notifications you enable.
  • Respond to support requests and feedback.
  • Prevent abuse, detect issues, and improve reliability.
  • Measure usage, product performance, and beta interest.
  • Communicate about service updates, marketing updates, or support requests.

We use audit and security logs to investigate errors, enforce rate limits, and understand activity on both authenticated and public loan routes.

Section 4

Sharing and Service Providers

We use trusted service providers to host data, manage authentication, send emails, measure analytics, support marketing subscriptions, and run the app. These providers only process data to deliver the service on our behalf. We do not sell your personal information today. If that changes, we will update this policy before doing so.

  • Clerk Authentication: manages sign-in, sessions, and account credentials.
  • Supabase: hosts the application database and stores account, profile, loan, payment, reminder, audit-log, and related application records.
  • Resend: delivers account notifications and borrower reminders.
  • Buttondown: may handle beta signup and mailing list subscription emails on Repaya marketing properties.
  • Vercel Analytics and Speed Insights: help us understand aggregated usage and site performance.

We may also disclose information if required by law, to protect the security of the service, or in connection with a merger, acquisition, or asset sale.

Section 5

Public Loan Links

If you share a public loan link, anyone with the link may be able to view loan and payment details associated with that record, including balance progress, payment history, lender display information, and any borrower-visible notes or payment notes shown on that page.

Public loan routes may also generate audit and abuse-prevention logs, including request IP, user agent, and related request metadata. Share those links carefully.

Section 6

Cookies and Analytics

Repaya and our providers may use cookies, session storage, or similar technologies to keep users signed in, protect the app, and measure product performance.

We currently use Clerk for authentication-related session handling, Vercel analytics tooling for aggregated traffic and performance measurement, and Buttondown for marketing signup flows on Repaya properties when those flows are available. Browser settings or extensions may block some of these technologies, but doing so can affect how the product works.

Section 7

Data Retention

We keep your data as long as you maintain an account, remain on a marketing list, or as needed to provide the service, maintain records of reminder delivery, investigate abuse, and comply with legal obligations.

You can request deletion of your account and related data by contacting us. Some records may be retained for security, fraud prevention, backup, or legal compliance purposes for a limited period after deletion.

Section 8

Your Choices

  • Update your profile information in the app.
  • Delete loans or payments you no longer want stored.
  • Request account deletion or data export.
  • Unsubscribe from marketing emails when available.

If you are a California resident or have privacy rights under another applicable law, you can contact us to make an access, correction, deletion, or similar request and we will review it under the laws that apply to your request.

Section 9

Changes to This Policy

We may update this Privacy Policy from time to time to reflect product, vendor, or legal changes. When we do, we will update the "Last updated" date above. Material changes will be reflected in the updated policy before the new practice takes effect.