Privacy & Security

How PayUp protects your data and handles privacy.

PayUp takes data security seriously. Here's how your information is protected.

Authentication

  • Powered by Firebase Authentication — a Google-backed platform trusted by millions of apps.
  • Email verification required before accessing club data.
  • Secure password hashing — PayUp never stores passwords in plain text.
  • Third-party sign-in (Google, Microsoft) supported via OAuth 2.0.

Payment security

  • All payments processed by Stripe, a PCI Level 1 certified payment processor.
  • PayUp never sees, stores, or has access to card details.
  • 3D Secure (SCA) supported for additional authentication on card payments.
  • Stripe handles all fraud detection, chargebacks, and dispute resolution.

Data isolation

  • All club data is fully isolated — one club cannot see another club's data.
  • Firestore security rules enforce that only authorised members can read or write data for their club.
  • Role-based permissions ensure players, admins, and owners only access what they should.

PayUp is committed to protecting your privacy and complying with data protection regulations.

Privacy policy

Our full privacy policy is available at /privacy-policy. It details what data we collect, how we use it, and your rights.

Cookies

PayUp uses essential cookies for authentication and session management. On your first visit, a cookie consent banner will appear asking for your consent. We do not use advertising or tracking cookies beyond what's necessary for the service to function.

Your rights

  • You can request deletion of your account at any time from the Account page. Your club admin will be notified and will process the deletion.
  • You can update or correct your personal information at any time.
  • Contact us at support@payupapp.co.uk for any data-related requests.