Pay Day Privacy Policy

Last updated: 30 October 2026

Pay Day is an invoicing app. Your invoices, estimates and clients stay on your device. Midgar's servers see only what an action you start needs: a credit balance tied to an anonymous account, an anonymous Midgar ID, and, when you ask for them, a VAT check, a Peppol delivery or an AI draft. There is no advertising inside the app and no tracking.

In short

• Invoices, estimates, clients, your business details and logo are stored on your device and are not uploaded to us.
• A client's VAT number goes to the EU VIES service only when you check it. An invoice goes out over Peppol only when you send it.
• An AI draft sends the photo or text you gave, and nothing else, only after you allow AI drafting.
• The app keeps two anonymous identifiers: an account key for your credit balance, and a Midgar ID that also works in Midgar's other apps. Neither holds your name or email address.
• Purchases are made through Apple. Our own server verifies them and keeps the record of what you bought.
• Nothing is sold, and no data is given to third parties for their own use.

Who we are

Pay Day is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

AI processing

To provide the app's AI drafting, only when you tap an AI action to draft line items from a photo or a description or to write a payment reminder, the content you provide (that photo or text, plus the invoice currency or the invoice's number, amount, due date and the client's name) is sent over an encrypted connection to our backend at api.midgarcorp.cc, operated by Midgar Oy, which forwards it to OpenAI (OpenAI, L.L.C.) solely to generate the draft you requested. Nothing is sent until you grant permission in the app's AI consent screen, which you can withdraw at any time in Settings. Your saved invoices and client list are not sent. This data is processed only to produce your result and is not used to train AI models. Our server keeps a usage record of each AI action (when, what it cost and which model answered), linked to your anonymous account and deleted with it. Our AI provider handles the request under its own privacy and security commitments and is permitted to use it only to return your result.

Identity

Pay Day works without an account. On first launch we create an anonymous, device-based account used to hold your credit balance and to recognise your Pay Day Pro subscription. It holds no name, email address or phone number. You may optionally Sign in with Apple to sync your balance across devices, in which case we receive only the identifier Apple provides. When you delete your account in Settings, this account, your credit balance and the records linked to it are deleted from our server and the invoices, estimates and clients are erased from your device.

The anonymous Midgar ID

The app also asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we keep the identifier of the attested key with the ID and receive nothing else about you. The ID is sent with some requests as a sign-in token, so that our server can link it to your credit account, and on the More Apps screen it shows which Midgar apps you already use. It is not removed by Delete Account in Pay Day, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

Purchases

Subscriptions and credit packs are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which product, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that Pay Day Pro is recognised on all your devices and your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. Our server checks the signed transaction of a credit pack before it credits your balance. From version 1.1.5, neither the app nor our servers send anything about your purchases to RevenueCat; earlier versions have RevenueCat validate purchases, and it receives the purchase receipt from Apple, an anonymous identifier that it generates and your IP address, but not your name or email address. We never receive your payment-card details.

Invoice and client data

The invoices and estimates you create, including your business details and your clients' names, addresses, VAT identifiers, and the amounts, are stored on your device. Two optional actions send data off your device, only when you start them:

• VAT validation: a client's VAT number is sent to the EU VIES service to confirm it is valid.
• Peppol delivery: the complete electronic invoice (an EN 16931 document with the buyer and seller details and the financial breakdown) is transmitted through our certified Peppol access-point provider to your client's accounting system. Our server does not keep the document. It keeps a record of the transmission linked to your anonymous account: the invoice number, your client's Peppol address, when it was sent, the result and a transmission identifier, so that a document is never sent twice and so that we can help you if a delivery fails. Deleting your account in Settings also deletes these transmission records.

Currency rates are fetched from the European Central Bank's reference rates through our server and carry no information about you or your invoices.

Because invoices necessarily contain information about your clients (third parties), that information is processed and transmitted as above solely to deliver the document or check the number you requested. You are responsible for having a lawful basis to invoice your clients. You can always produce and share an invoice as a PDF without using either action.

On-device data

Content you create in the app, such as your invoices, estimates, clients, logo and settings, is stored on your device and is not uploaded to us. A diagnostic log is written there too, recording errors and events such as an invoice number, never the contents of your invoices, your descriptions or any token. It is not uploaded to us.

More Apps

Settings has a Midgar universe card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Advertising measurement

We may promote Pay Day with ads on the App Store. If you installed the app after tapping one of those ads, Apple tells our server which campaign, ad group, and search keyword produced the install, and the country the App Store served it in, never who you are. Apple's App Store attribution includes no advertising identifier and no device identifier, which is why it requires no tracking permission. We keep those campaign details alongside your anonymous account purely to see which ads pay for themselves, we receive nothing that could recognise you in any other app or website, and we never share it.

Children

The app is not directed at children under 13 and does not knowingly collect information from them. It contains no advertising and no user-to-user communication.

What we don't do

We do not sell your data, show advertising inside the app, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.

How long we keep data

• Your invoices, estimates, clients and the log: only on your device, until you delete the app or your account.
• Your anonymous account, its credit balance and usage records: until you delete your account in Settings.
• Peppol transmission records: until you delete your account in Settings with version 1.1.5 or later, or ask us to delete them.
• The Midgar ID record: until you ask us to delete it.
• Purchase records: Midgar's purchase ledger keeps them as financial records, linked to your Midgar ID until that ID is deleted, after which nothing links them to a live ID. RevenueCat keeps the records it received from earlier versions of the app under its own policy. Apple's records of your purchases: kept by Apple.

Your choices and rights

You can delete your account in Settings at any time, which removes your anonymous account, the Peppol transmission records linked to it (from version 1.1.5) and everything saved on the device. Deleting the app alone removes the on-device data but not the server-side account. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the invoices, deliveries, drafts and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider, by OpenAI as our AI provider and by our Peppol access-point provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.