Privacy policy
What RePay collects, why, who sees it, and what stays on your phone.
Who we are and what this covers
RePay is made by RePay ("we", "us"). This policy covers the RePay Android app, the payer pages at pay.repay.et and the Telegram bot, and the website repay.et.
It applies to three kinds of people:
- Owners and staff who use the app to track the money they collect.
- Payers: tenants, parents, members and clients whom an owner has added to RePay. Payers do not need an account.
- Visitors to repay.et.
RePay is not a bank or a wallet and never holds anyone's money. We keep records of payments; we do not move them.
What we collect
| Who | What | Why |
|---|---|---|
| Owners and staff | Phone number, name, language, the businesses you create, your plan and billing history | To sign you in with a one-time code, run your account and bill you |
| Payers (entered by the owner) | Name, phone number, what they pay and when, payment records, slips and references they send, whether they have stopped reminders | To show the owner who paid and who owes, send reminders and receipts, and check slips |
| Payers (entered by the payer) | The phone number they confirm on pay.repay.et or in Telegram, the slips and references they upload | To show them their dues and receipts, and pass their slip to the owner |
| Everyone | Device and app version, crash reports, the times you use the app | To keep the app working and fix problems |
| Visitors to repay.et | The phone number you give the waitlist form, if you do | To message you once when RePay launches |
We do not collect card numbers or bank passwords. Online payments are taken by Chapa on its own pages; we receive only the confirmation that a payment was made, its amount and its reference.
Your phone contacts
When you add a payer from your contacts, RePay reads only the contact you pick: the name and the phone number. We do not upload your contact list.
Bank SMS and your privacy
On Android, RePay can read money-in SMS from the banks you choose (CBE and Telebirr at launch) on your own phone, and suggest which payer paid. This is optional. Only an owner can turn it on, and you can turn it off at any time in Settings.
When it is on:
- RePay reads only messages from the sender numbers of the banks you chose, and only those that report money coming in.
- The message text is read and matched on your phone. It is never uploaded, stored on our servers or shown to anyone else.
- Nothing is recorded until you or your staff tap to confirm a suggestion. Only the payment you record (payer, amount, date, the bank reference) is saved to your account.
- RePay does not read personal messages, one-time codes or messages from anyone other than the banks you chose.
This is the only reason RePay asks for the SMS permission. If you deny it, everything else in the app still works.
How we use data
- To run the app: show who paid, add up missed months, calculate dues and credit.
- To send reminders, slips and receipts to payers on Telegram and SMS, on the schedule the owner turns on.
- To bill owners for paid plans and send plan reminders.
- To answer your support messages.
- To keep RePay secure and fix bugs, using crash reports and usage statistics.
We do not sell data, and we never use payers' phone numbers for marketing or share them with other businesses. Payers' numbers are used only for the owner's own reminders and receipts.
If you are a payer
An owner added you to RePay because you pay them for something: rent, fees, dues or a service. The owner decides what is recorded about you; RePay processes it on their behalf.
You can stop reminders at any time by replying STOP to an SMS or tapping "Stop reminders" in Telegram. The owner sees that you have stopped. To correct or remove your record, contact the owner; if that doesn't work, contact us and we will help.
How long we keep data
- Payment records are kept for as long as the owner's account exists. They are never deleted because a plan ended or was not paid.
- Slip photos are deleted 12 months after they were uploaded. The payment record, with its amount and reference, stays.
- Waitlist numbers are deleted after the launch message is sent.
- Account deletion: an owner can delete their account in the app (Settings → Delete account) or by writing to @RePayET. We delete the account and its records within 30 days, except what we must keep for billing or by law.
Security
Data is encrypted in transit and at rest, with daily backups. You sign in with your phone number and a one-time code; there is no password to steal. Every change to a record is logged with who made it and when. Slip photos can be seen only by the owner and staff of that business.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Owners can export their records from the app. Write to @RePayET or message @RePayET; we answer within 14 days.
Children
RePay accounts are for adults. Schools and kindergartens add the parent or guardian as the payer, with the child's name only as a label on the record.
Changes to this policy
When we change this policy we update the date at the top and, for changes that matter, tell owners in the app before they take effect.
Contact
RePay · @RePayET · Telegram @RePayET