Privacy Policy

Who we are

PayUp is provided by Woody Software Ltd, a company registered in England and Wales (company number 17418628), which acts as the data controller for personal data processed through the Service.

Contact: support@payupapp.co.uk

What we collect

• Account information: name, email, phone number (used to send SMS payment reminders and club-related messages, see "SMS and WhatsApp messaging" below), club and team membership, role (Owner, Super Admin, Admin, Player).
• Club, team, and payments data: payments assigned (club fines, membership fees, referee fees), amounts, reasons, fixtures, expenses, payment status.
• Authentication data provided via Firebase Authentication.
• Technical data: device/browser information, IP address, and basic logs for security and support.

How we use personal data (purposes and lawful bases)

• Provide and operate the Service, including team management, payment assignment, and payments tracking (Contract).
• Authenticate users and secure access (Legitimate interests and/or Contract).
• Communicate important updates and respond to support requests, including payment reminders and account-related messages by email and SMS (Legitimate interests).
• Maintain and improve functionality, fix bugs, and protect against abuse (Legitimate interests).
• Comply with legal obligations and enforce our Terms (Legal obligation and Legitimate interests).

Payments

Online payments — by card (including Apple Pay, Google Pay, and Samsung Pay), Klarna (Pay Later), or UK bank Direct Debit (Bacs), where enabled by your club — are processed securely by Stripe via Stripe Connect. We do not collect, process, or store your card or bank account details — all payment data is handled entirely by Stripe (and, for Klarna payments, Klarna as Stripe's payment method provider) in accordance with PCI-DSS standards. We record the payment reference, amount, and status in order to reconcile payments within your club. For more information on how these providers handle your data, see Stripe's Privacy Policy and Klarna's Privacy Policy.

Where clubs offer bank transfer or other payment methods, PayUp records the payment reference and amount but does not intermediate those transactions.

Separately, when a club subscribes to PayUp, the club owner's payment card or UK bank account details are collected and processed directly by Stripe to bill the club's subscription. As above, PayUp does not collect, process, or store card or bank account details for this either.

SMS and WhatsApp messaging

Where you have a valid UK mobile number on file, PayUp automatically sends payment reminder text messages to that number, in addition to email. These are transactional/service messages about payments you owe — not marketing — so we don't require separate opt-in consent for them, and there isn't a toggle to turn them off individually. If you don't want to receive them, remove your phone number from your account in Account settings; this also stops any other SMS messages described below.

Your club or platform admins may also use your phone number to send you a one-off SMS registration reminder (if you haven't yet claimed your player account) or, occasionally, a broadcast announcement by SMS or WhatsApp. Standard message and data rates from your mobile network provider may apply. These messages are delivered via Twilio — see Data processors and transfers below.

Data processors and transfers

We use the following processors to deliver the Service:

• Google Firebase (Authentication, Firestore, Cloud Functions, Hosting, and Storage)
• Stripe (payment processing via Stripe Connect for online card, Klarna, and Bacs Direct Debit payments)
• Klarna (as Stripe's payment method provider, for clubs that enable Klarna Pay Later)
• Twilio (SMS and WhatsApp messaging for payment reminders, registration reminders, and admin announcements)
• Email service providers for password resets, verification emails, and club invites

Your data may be transferred outside the UK (e.g., to the EEA or US) where our processors operate. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures as required by the UK GDPR.

Retention

We retain account and team records for as long as your account/team remains active. Payment records are retained for operational needs and to maintain accurate team history. If your account or team is deleted, we will delete or anonymise data within a reasonable period unless we must retain it for legal or legitimate business purposes.

Your rights

Under the UK GDPR, you have rights including to access, rectification, erasure, restriction, portability, and objection to certain processing. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise your rights, contact us using the details above. We may need to verify your identity before responding.

Children

PayUp is intended for use by clubs and teams. Where players are under 18, administrators are responsible for ensuring lawful access and parental/guardian oversight in accordance with applicable laws and your club policies.

Security

We implement technical and organisational measures appropriate to the risk, including access controls, encryption at rest and in transit (via Firebase), and monitoring. No system is 100% secure; we encourage you to use strong, unique passwords and keep them confidential.

Cookies and similar technologies

PayUp uses essential cookies/local storage necessary for authentication and application functionality — these are always active. With your consent (via the cookie banner), we also use privacy-friendly analytics (Google Analytics 4, via Firebase Analytics) to understand how the app and website are used. Analytics only runs if you accept; you can decline and continue using PayUp normally. We do not use advertising cookies or sell your data.

Sharing

We share data within your club as needed to operate the Service (e.g., admins can view payments for players and teams in that club). We do not sell your personal data.

Changes

We may update this policy from time to time. We will post the updated version in the app and update the effective date. Material changes may be communicated directly.

Contact

Questions or requests: support@payupapp.co.uk