Last updated 13 August 2026
PayperWIZ is operated by Elaq Limited, a company registered in Ireland. For the small amount of data that actually reaches us, Elaq Limited is the data controller under the GDPR.
The short version. PayperWIZ keeps your card details, your spending and your locations on your own device. It never asks for a card number. The only thing it ever sends anywhere is a short piece of text you type, and only after you switch that on.
| Data | Why it exists |
|---|---|
| Card nicknames, issuers, reward rates, fees, caps | To work out which card to recommend |
| Amounts you log | To track monthly caps and welcome bonus progress |
| Places you visit and have saved | To recognise where you are and stay quiet where you asked |
| Photos of your cards, if you take any | So your wallet shows your real cards |
None of this is transmitted to us or to anyone else. There is no PayperWIZ account required to use any of it, and no analytics collecting it in the background.
PayperWIZ asks for background location so it can tell you which card to use at the moment you arrive somewhere. It uses significant-location-change and geofencing rather than continuous tracking, which is both the reason it barely affects battery and the reason it cannot follow you around. Places you mark as Home or Do Not Disturb never produce a notification.
You can withdraw location access at any time in iOS Settings. The app keeps working; it just stops noticing arrivals.
PayperWIZ can research a card's published reward terms for you, and can work out the spending category of a place. Both use OpenAI, a company based in the United States. This is off until you turn it on, on a screen that names OpenAI and lists exactly what is shared.
| Sent to OpenAI | Never sent |
|---|---|
| A card name you typed, such as "Emirates NBD Skywards Signature" | Card numbers |
| A place or description you typed, such as "petrol station" | Amounts you have logged |
| Your location | |
| Your name, email or any identifier |
If you buy credits, requests are relayed through our server so we can meter them. The server records that a request happened and what it cost in credits. It does not store the text of your request or the answer.
An account is needed only to buy credits. Sign in with Apple provides an anonymous identifier; we never receive your name, email or password. Payment is handled entirely by Apple and we never see your card details. We store your credit balance and its history so you can see where credits went.
You can delete your account and everything attached to it from inside the app, at any time. Deletion is deletion, not deactivation: your account, your sessions and your whole credit history are removed in a single step, not flagged as inactive.
One thing survives, and we would rather say so than have you find out. When you first sign in we record a one-way cryptographic hash of the anonymous Apple identifier, purely to note that this identity has already received its free starter credits. It cannot be reversed into an Apple ID, it is not linked to anything else we hold, and it carries no name, email or device information. Without it, deleting an account and signing back in would hand out free credits again on an endless loop, which we would ultimately pay for by giving everyone fewer. We keep it on the basis of our legitimate interest in preventing that abuse, and it is the smallest thing that achieves it.
Settings has an Export option that writes everything PayperWIZ holds to a JSON file you control. There is no lock-in and nothing to request from us.
Because we are established in Ireland, the GDPR applies to the data we hold. You have the right to ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, to object to a use of it, and to withdraw a consent you previously gave.
These rights are narrower in practice than they sound here, and that is deliberate: almost everything PayperWIZ knows about you never leaves your phone, so there is nothing on our side to disclose, correct or delete. The Export button in Settings gives you the on-device data immediately, without asking us.
| What we hold | Why we may hold it (legal basis) | How long |
|---|---|---|
| Your credit balance and its history | Performance of our contract with you | While your account exists, then as long as tax and accounting law requires |
| Purchase records from Apple | Legal obligation and contract | As required by tax law |
| The text of a research request you send | Your consent, given on the AI screen | Not stored by us; passed through and discarded |
| Your location | Your consent, given to iOS | Never transmitted, never held by us |
| A one-way hash noting that an Apple identity has claimed its free starter credits | Our legitimate interest in preventing repeat claims | Kept after account deletion; it is what stops the free credits being claimed again |
Where we rely on consent, you can withdraw it at any time, in the app for AI and in iOS Settings for location. Withdrawing it does not undo processing that already happened.
OpenAI is based in the United States. When you turn the AI feature on and send a request, that text leaves the EEA. That transfer relies on the standard contractual clauses approved by the European Commission. If you do not want any data leaving the EEA, leave the AI feature off; the rest of the app works without it.
If you think we have handled your data badly, please tell us first at support@payperwiz.com. You also have the right to complain to the Irish Data Protection Commission, our supervisory authority, at dataprotection.ie, or to the authority in your own EU country.
PayperWIZ is not directed at children under 13 and we do not knowingly collect their data.
If this policy changes materially, the app will tell you before the change takes effect rather than quietly updating a web page.
Elaq Limited, Ireland · support@payperwiz.com