Privacy Policy
Undebtor holds a detailed picture of what you owe. This page says exactly what we store, who else can see it, and how to take it back.
Last updated 26 September 2026
1.Who is responsible for your data
João Paulino, based in Portugal, is the data controller for the personal data described here, meaning the person who decides why and how it is processed, and who is answerable to you for it.
- Controller
- João Paulino (Portugal)
- Contact
- support@undebtor.com
- Data stored in
- the European Union (Supabase, eu-west-1, Ireland)
Undebtor is small enough that it is not required to appoint a Data Protection Officer. The address above reaches the person who actually makes these decisions.
2.What we collect
Everything below is either given by you or generated by your use of the app.
- Account
- Email address, password (stored only as a cryptographic hash, never in readable form), display name if you give one, and the date you signed up.
- Your debts
- For each debt: the name you give it, its type (student loan, credit card, BNPL, car loan, other), current and original balance, interest rate, contractual minimum payment, and what you actually pay each month.
- Payments
- Amounts you log, the dates, and any note you attach to a payment.
- Progress
- Your Freedom Score, streaks, months reduced, badges, quests completed, chosen strategy and changes to it.
- Usage
- Which features you open inside the app, used to award quests and to understand what people actually use. No third-party analytics, advertising or tracking tools are used.
- Time Capsule
- If you write a letter to your future self, its contents (stored until the date it is delivered to you, or until you delete it.
- Billing
- Your plan, and the customer and subscription identifiers issued by the payment provider. We never see or store your card number.
- Technical
- Standard server and security logs, including IP address and browser type, kept briefly to keep the service running and to detect abuse.
Undebtor has no connection to your bank. We do not use open banking, we cannot see your accounts, and we cannot move money. Every figure in the app is one you entered.
3.The Subscription Audit, specifically
This is the only feature where a document leaves our systems, so it gets its own section.
The Subscription Audit works by reading a bank statement you provide, pasted as text or uploaded as a PDF or image. To analyse it, that statement is sent to Anthropic, the provider of the AI model behind the feature, and processed on their infrastructure.
A bank statement reveals far more than subscriptions. Before you upload one, redact anything you would rather not share, and use the paste option with only the relevant lines if you prefer.
- We do not store the statement. Only the extracted result is saved to your account: service names, categories, monthly costs, and your own notes about how often you use them.
- Anthropic does not use data submitted through its commercial API to train its models. They retain it only briefly for abuse detection, under their own terms.
- The feature is optional. If you never use it, no document is ever sent anywhere.
4.Why we process it, and on what legal basis
- To run the service
- Creating your account, storing your debts, calculating projections, tracking progress. Legal basis: performance of our contract with you.
- To take payment
- Managing subscriptions, upgrades and cancellations. Legal basis: performance of our contract with you.
- To keep it secure
- Detecting abuse, preventing fraud, diagnosing faults. Legal basis: our legitimate interest in a service that works and is not attacked.
- To improve it
- Understanding which features are used, in aggregate. Legal basis: our legitimate interest in building a product people can actually use.
- Subscription Audit
- Analysing a statement you choose to submit. Legal basis: your consent, given by submitting it. You can withdraw it by not using the feature.
- To meet legal duties
- Keeping records we are required to keep, such as for tax. Legal basis: legal obligation.
We do not sell your data, share it with data brokers, use it for advertising, or make automated decisions that have a legal or similarly significant effect on you.
5.Who else processes your data
Undebtor is run by one person and relies on the following providers. Each one is bound by a data processing agreement and may only use your data to provide their service to us.
- Supabase
- Database and authentication. Holds your account and all the debt data described above.
- Vercel
- Hosting and content delivery. Processes requests and standard server logs.
- Lemon Squeezy, LLC
- Payments and merchant of record. Receives your email and billing details directly; your card details go to them, never through us.
- Anthropic
- AI processing for the Intelligence Hub, including the Subscription Audit described in section 3.
We will also disclose data if the law genuinely requires it, such as a valid court order or regulatory demand. If that ever happens and we are permitted to tell you, we will.
6.Where your data goes
Your account and debt data are stored in the European Union (Supabase, eu-west-1, Ireland). Some of the providers above are headquartered in the United States, so certain processing (payments and AI analysis in particular) takes place outside the European Economic Area.
Those transfers are covered by the European Commission’s Standard Contractual Clauses, and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards applying to any specific transfer.
7.How long we keep it
- While your account is open: your debts, payments and progress are kept so the app can show you a continuous history. That history is the product.
- After you delete your account: personal data is deleted from our live systems promptly, and works its way out of encrypted backups within 30 days.
- Billing records: kept for as long as tax and accounting law requires, typically several years, by us and by the merchant of record.
- Security logs: kept for a short period, then discarded.
8.Your rights
Under the GDPR you can, at any time and free of charge:
- Access: ask for a copy of the personal data we hold about you.
- Rectify: correct anything inaccurate. Most of it you can edit yourself in the app.
- Erase: have your data deleted. See section 9.
- Port: receive your data in a structured, machine-readable format, or have it sent to another provider.
- Object or restrict: object to processing based on our legitimate interests, or ask us to pause it while a dispute is resolved.
- Withdraw consent: where processing is based on consent, withdraw it without affecting what happened before.
Email support@undebtor.com and we will respond within one month, as the GDPR requires.
If you think we have handled your data badly, please tell us first, but you always have the right to complain to a supervisory authority. Ours is the Comissão Nacional de Proteção de Dados (CNPD), and you may also complain to the authority in the EU country where you live.
9.Deleting your account
You can delete your account yourself, without emailing anyone: go to Settings → Delete account in the dashboard. It removes your profile, debts, payment history, progress and any Time Capsule letter.
Deletion is permanent and we cannot undo it, so export anything you want to keep first. If the deletion fails for a technical reason, email support@undebtor.com and it will be completed by hand. Cancelling a subscription and deleting an account are separate actions. Cancel your subscription too if you have not already.
11.Security
Traffic is encrypted in transit with TLS and data is encrypted at rest by our database provider. Passwords are stored only as hashes. Database access is restricted per user by row-level security, so one account cannot read another’s rows.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant supervisory authority within the timescales the GDPR sets.
12.Children
Undebtor is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, tell us at support@undebtor.com and we will delete it.
13.Changes to this policy
We will update this page when our processing changes. The date at the top shows the last revision. If a change materially affects how your data is used, we will email you before it takes effect rather than relying on you to re-read this page.