Privacy Policy

Last updated: 14 September 2026

In short: Bayar stores the expense records you enter so you can see them across your devices. We do not show ads, we do not use analytics or tracking, and we do not sell your data.

Who we are

Bayar (the Android app, the iOS app and the web dashboard at bayar.npj.app) is operated by Nebula Technology, Surabaya, East Java, Indonesia. For any privacy question, contact hello@npj.app.

What we collect

Account details. Your username and a hashed version of your PIN. We never store the PIN itself. If you sign in with Google, we also receive your Google account ID and email address.
Expense records you enter. Amounts, dates, vendors, categories, notes, projects, budgets and reimbursement status, plus which workspace each record belongs to.
Receipt images you attach. If you attach a receipt photo to an expense, it is stored with that expense.
Receipt text for scanning. When you scan a receipt, the text is read from the photo on your device. Only that text is sent to our server to pick out the vendor, total, date and line items.
Technical data. Your IP address is used to limit repeated failed sign-in attempts, and may appear briefly in server logs.

We do not collect your location, contacts, or advertising identifiers. Fingerprint and face unlock are handled entirely by your phone's operating system, and we never receive biometric data.

How we use it

To sign you in and keep your account secure.
To store and sync your expenses between the apps and the dashboard.
To fill in expense details from scanned receipts.
To show reports and budgets to you and your workspace members.

Who can see your data

Your workspace. Members of a workspace can see and edit that workspace's records.
Service providers that run Bayar for us, and only for that purpose:
- Zeabur, which hosts our server and database.
- Anthropic, which processes receipt text to extract expense details. The photo itself is not sent.
- Google, when you choose Google sign-in.
The law. We may disclose data if required by law.

We do not sell or rent your personal data, and we do not share it for advertising.

Data on your device

The apps keep a local copy of your records so they work offline. Sign-in tokens are stored in the Android Keystore or iOS Keychain. The web dashboard uses a sign-in cookie, and stores your username and selected workspace in your browser's local storage. There are no tracking or advertising cookies. Signing out or uninstalling the app removes local data.

Security

All data is sent over encrypted HTTPS connections. PINs are stored only as hashes, and each workspace's records are isolated from other workspaces in the database.

How long we keep it

We keep your data while your account is active. When you delete your account, your account details and every workspace that only you belong to, with all its expenses, are deleted immediately and permanently. Workspaces shared with other people stay available to them.

Deleting your account and your rights

You can delete your account yourself at any time in the app under Settings → Delete account. You will be asked to confirm with your PIN.

You can also ask us to access, correct, export or delete your data at any time by emailing hello@npj.app from the email address linked to your account, or with your username. We respond within 30 days. These rights are provided in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

Children

Bayar is not intended for children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date above. For significant changes, we will also let you know in the app.