Privacy policy

Confirmation images. When you scan or import a customer's payment confirmation, the image is stored in a private bucket for your workspace with location metadata removed. Text is extracted on your phone. Images are scheduled for deletion after 30 days during the public beta; the structured record stays.

Payment notifications (Android only). If a workspace owner enables listening on their phone or pairs a separate payment phone and you grant Notification Access, PayTsek reads notifications from the wallet apps enabled for that workspace (GCash, GoTyme, Maya and MariBank). Only positive incoming-payment notifications are parsed; the amount, masked sender, reference (when shown), and timestamps are uploaded. OTPs, security prompts, outgoing payments, promotions, other apps and unrecognised formats are discarded on the phone and never uploaded. Unmatched notifications are scheduled for deletion after 7 days unless linked to a record. A listener diagnostic stays local and never becomes payment evidence.

PayTsek is an independently developed beta; an operating business has not yet been registered. The responsible operator's formal identity and privacy arrangements are still being finalized; this notice is not a certification of compliance. Account and service data is used to provide the service you request, secure accounts, and support your team. Workspace owners determine the business purpose for their payment records and must have a lawful basis to collect customer or employee data. Questions or privacy requests can be sent to support@paytsek.online.

• Wallet login, MPIN, OTP, balance or transaction history.
• GPS location, contacts, a general installed-app inventory, IMEI or other hardware identifiers. The collector checks only supported wallet packages and versions. Devices use an app-generated ID.
• SMS messages. PayTsek does not read Messages notifications as a workaround.

Workspace owners see all workspace records and the incoming-payment inbox. Cashiers see records they created and only minimal, masked candidate details needed to review a match. We do not sell data and do not maintain any cross-business list of customers or references.

• Unmatched notifications: scheduled for deletion after 7 days.
• Confirmation images: 30 days during the public beta, fixed when the image is saved.
• Structured records and audit trail: reviewed for retention after 12 months. Automatic record purging is not active; these remain until an approved deletion or workspace deletion. Contact support for a retention or erasure request. This is operational recordkeeping, not a tax-record guarantee.
• Export files: 24 hours.

Under the Philippine Data Privacy Act, you may ask to be informed, access or correct your data, object to or request erasure of qualifying processing, request portability where applicable, and raise a complaint with the National Privacy Commission. You may contact support@paytsek.online so we can verify and act on a request; contacting us is not a prerequisite to complaining to the regulator. Applicable rights in other countries are not waived.

You can delete your account from Settings → Privacy & data in the app, or by request at support@paytsek.online. Workspace owners can delete an entire workspace. Sole owners must transfer ownership or delete the workspace first so business records are never silently orphaned. Account deletion removes access immediately and queues removal of the authentication account. Existing business records remain in their workspace with personal authorship removed; this does not erase personal information shown in someone else's receipt. Those requests need a separate scoped review. Unsynced scans remain on the phone to avoid accidental loss. Backups may retain deleted data until their own expiry.

Supabase provides database, private storage and authentication; Vercel hosts the API and website. Google provides optional sign-in and on-device text recognition. GitHub hosts source, builds and public app releases, not private receipts. These services may process service data outside the Philippines. Processing locations, agreements and transfer safeguards require operator review before expanding the beta. Optional Sentry reporting is disabled by default and requires a separate activation review. The integration accepts only fixed error codes, app release and surface, not receipts, notification text, names, amounts, references, tokens, screenshots or session replay. Infrastructure providers may process network metadata such as IP addresses.

Data is encrypted in transit, workspace access is restricted by role, and proof images use short-lived private links. We investigate suspected incidents and notify affected people and the National Privacy Commission when Philippine law requires it.

“Strong match” means PayTsek saw a notification on your own phone that agreed with the record. It is not a confirmation from GCash, GoTyme, Maya or any bank, and PayTsek is not affiliated with them.