Privacy

Updated: 8 October 2026

This is a translation for convenience. If the two versions differ, the Albanian version applies.

Here we explain, in plain words, what data we collect and what we do with it. There are two parts: the app on your phone and this website.

1. The app on your phone

• Without the cloud copy, your data never leaves your phone. Bills, expenses, budget and bill photos are stored only on your device.
• To use the app you create an account (section 2). The cloud copy is a separate choice, and yours.
• We don’t connect to your bank and don’t ask for banking credentials.
• Reminders are created and shown by the phone itself. They don’t pass through our servers.
• The app fetches only one thing from the internet: the euro–lek exchange rate, from a public rates service. None of your data is sent in that request.
• Backup files are created by you and stored wherever you choose (e.g. Google Drive). We don’t see them.
• If you choose to forward your bank SMS to the app, they are read on your phone: only the amount, the shop and the date are kept, not the message. Nothing is sent anywhere.

2. Account and cloud copy

The account tells us who you are: for Premium and to help you when you write to us. A copy of your data is kept on our server only if you choose it (when creating the account or in Profile → Account), so you can restore it on a new phone.

• For the account we store your name, surname, email and, if you give it, your phone number. Your password never leaves your phone: the server receives only a key derived from it, and stores even that only as a hash (PBKDF2).
• The cloud copy is encrypted on your phone before it is sent (XChaCha20-Poly1305). We store it, but cannot read it: it opens only with your password or the recovery code the app gives you. Bill photos are not sent.
• Only the latest copy is kept. In Profile → Account you can stop it, restore it, or delete it together with the account at any time.
• We don’t open it, analyse it or give it to anyone. We don’t use it for advertising.
• When you delete the account in the app, the copy and every saved sign-in are deleted with it.
• If you forget your password, you set a new one with a code we email you. The cloud copy then opens with the recovery code; without it, not even we can open it.
• Sign-in attempts are limited (10 per 15 minutes per account), so passwords cannot be guessed.
• The copy is stored at Cloudflare (D1), on servers in the European Union.

3. This website

• On the waiting list we store your name and email, and your phone number only if you give it, together with the sign-up date and where you came from (e.g. “facebook”).
• We use them only to tell you when the app is ready (by email, or by message if you gave a number) and to organise the first group of testers. Right after you register, we send one confirmation email.
• We don’t give, sell or rent them to anyone.
• We don’t send ads or add you to other lists.
• The data is stored at Cloudflare (D1), on servers in the European Union.

4. Cookies and tracking

This site uses no advertising cookies, no Google Analytics, Meta Pixel or similar tracking tools. The only thing we store in your browser is the language you chose with the flag at the top (Albanian or English), so the page opens in that language next time. We count visits without cookies and without IP addresses: only the day and where they came from (e.g. “facebook.com”), so we know where people find us. The server keeps the usual technical logs (time of request, IP address), which are deleted automatically after a few days.

5. Your rights

You can ask us at any time:

• to see what we hold about you (name, email, phone if given, and the cloud copy if you turned it on),
• to correct it,
• to delete it — we do so within a few days, without asking why.

Write to info@pagesaplus.com; the word “delete” is enough.

6. Children

The service is not aimed at children under 16 and does not knowingly collect their data.

7. Changes

If something important changes — for example, if live syncing between devices is added one day — we will write it here and let the people on the list know by email before it applies.

8. Who we are

Pagesa Plus, Albania. Contact: info@pagesaplus.com.