Privacy Policy

Effective November 8, 2026

This policy describes how PolyWise (“PolyWise,” “we,” “us”) collects, uses, and shares information when you use getpolywise.com and the PolyWise apps for iPhone and Android (together, the “service”). PolyWise is based in North Carolina, United States.

The short version. We collect what we need to send alerts for your business: your name and email from Apple or Google, your business and its address, and a push token for your phone. We do not sell your information, we do not use it for ads, and we do not track you across other apps or websites.

Questions about this policy: hello@getpolywise.com.

Information we collect

Account details. You sign in with Apple or Google. We receive the name and email address that provider shares with us (which may be a private relay address from Apple), and an identifier for your account with that provider. We do not receive your Apple or Google password. You can change your name in the app.

Business details. When you set up your business, you search for it or enter it. We store the business name, address, city, county, and state, the Google place ID and map link for the listing, the listing’s map coordinates, and the business type. We use these to decide which government sources and alerts apply to you. The app does not track your phone’s location. The coordinates are the business listing’s, not your device’s. If the Google listing has a website, we read a few public pages of that website once, when you set up, to suggest what your business offers (for example, delivery, vapes, or having employees). We also look at the listing’s opening hours to see if you open on Sundays or late at night. You can change these picks at any time. We keep only the picks, not the website’s text, and we never read pages behind a login.

Notifications. If you allow push notifications, we store your device’s push token and its platform (iPhone or Android) so we can send alerts, and your alert settings.

Alerts. We store the alerts we have sent to your account, and whether you have read them.

Sign-in sessions. When you sign in, we keep a one-way hash of your session key and when it expires. The key itself stays on your phone in secure storage.

Purchases. Subscriptions are bought through the Apple App Store or Google Play. Apple or Google handles your payment details; we never see or store your card number. We receive a purchase record from the store (such as the plan, purchase and renewal dates, whether it was a free or promotional period, and whether the subscription is active, cancelled, or refunded) so we can turn your access on or off. We attach a random billing ID to your purchase so it stays linked to your account.

Technical data. Our servers see the IP address of each request. We use it to limit how often requests can be made and to protect the service from abuse. Our hosting providers may keep short server logs that include IP addresses for security and debugging.

Crash reports. When the app crashes or hits an error, it sends a report so we can fix it: the error, the screen it happened on, the app version, and the phone model and system version. Reports don’t include your name, email, business details or alerts.

Website analytics and cookies. The marketing site uses Vercel Web Analytics and Google Analytics to count visits and see which pages are useful. They record page views and coarse technical data such as referring site, browser, operating system, device type, and country or region. Google Analytics sets first-party cookies (such as _ga) to tell new visits from repeat visits. We do not use these tools for advertising, and we do not use advertising cookies or build a profile of you for ads. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. See Vercel’s analytics privacy policy and how Google uses data from sites that use its services. The app itself has no analytics or advertising tools.

Messages to us. If you email us, we receive your email address and what you write.

How we use information

Find the government sources and alerts that apply to your business
Send push notifications when a source changes
Check your subscription and turn access on or off
Operate, secure, and improve the website and app
Send service messages, such as notice of changes to these policies
Let our small team know when a business signs up, subscribes, or turns off renewal, so we can welcome you or check in
Email you about your account now and then, such as a welcome note or a check-in from our team. These are personal emails, not a mailing list. Reply “stop” and we won’t email you again, except for messages we must send about your account or these policies
Count sign-ups, subscriptions and alerts by business type to see how the service is doing. These counts don’t include names or emails
Respond to questions and support requests
Comply with law and enforce our Terms of Service

Alerts are informational summaries. They are not legal, tax, or compliance advice. See our Terms of Service.

How we share information

We do not sell your personal information, share it for targeted advertising, or let third parties use it for their own marketing.

We share information with the service providers below, only so they can run the service for us:

Hosting and storage. Fly.io runs our servers, and Aiven hosts our database, both in the United States. Vercel hosts the website.
Website analytics. Vercel and Google receive website visit data, as described above, to provide analytics for getpolywise.com.
Sign-in and purchases. Apple and Google, when you sign in with them and when you buy or manage a subscription.
Push notifications. Expo, Apple Push Notification service, and Firebase Cloud Messaging receive your push token and the text of each alert so they can deliver it to your phone.
Crash reports. Sentry receives the app’s crash and error reports described above.
Business search. When you search for your business, what you type goes to Google Maps Platform to find matching places, under Google’s privacy policy.
AI summaries. We use Google Gemini to write plain-language summaries of changes to public government pages. We send the text of those public pages, not your name, email, or business details. When you set up, we also send the text of your business’s public website so Gemini can suggest what it offers.
Finding sources. We use Tavily, a web search service, to find official government pages. The searches contain a place name (such as a city, county, or state) and an industry, not your name, email, business name, or address. We also read public records from sources such as LegiScan and the Federal Register, which receive only the state and topic we look up.
Email. Mail sent to hello@getpolywise.com is forwarded by ImprovMX to a Google Gmail inbox.

We may also share information:

For legal and safety reasons, when we believe disclosure is required by law, or needed to protect PolyWise, our users, or others
In a business transfer, such as a merger, sale of assets, or reorganization, in which case the recipient will be bound by this policy or we will notify you of material changes

Retention

We keep your account, business details, and alerts for as long as your account is active. A sign-in on a device lasts 30 days from its last use and never more than 180 days, then you sign in again. Push tokens are deleted when you sign out, turn alerts off, or delete your account. Purchase records are kept as long as the law requires for tax and accounting. IP addresses used for rate limits are kept only briefly. Analytics data is kept in aggregated or de-identified form where practical.

Your choices and rights

Change your name, business, and alert settings in the app
Turn off push notifications in the app or your phone’s settings
Delete your account in the app at any time (see below)
Ask us to access, correct, or delete personal information we hold about you, or for a copy of it, by emailing hello@getpolywise.com

Depending on where you live, a state privacy law may give you more rights, such as the right to know, correct, delete, or get a copy of your information, and to opt out of sales, targeted advertising, or profiling. We do none of those three. We will verify your request using the email on your account, answer within 45 days (or tell you if we need more time, as the law allows), and not treat you differently for using your rights. If we deny a request, you can appeal by replying to our answer, and we will tell you how to contact your state attorney general if you are still not satisfied.

Deleting your account

You can delete your account at any time in the app: open the Profile tab and tap Delete Account, or tap Delete Account on the subscription screen. This permanently deletes your account, your business details, your alerts, and your push tokens. You can also email hello@getpolywise.com from the address on your account and ask us to delete it, and we will confirm once it is done. We may keep limited records where the law requires it, such as purchase records needed for tax or accounting.

Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in your App Store or Google Play subscription settings so you are not charged again.

So that a subscription you are still paying for isn’t lost, we keep two things after you delete your account: the random billing ID the store attached to your purchase, and a one-way hash of your Apple or Google account identifier. Neither contains your name, email, or business. If you sign in again with the same Apple or Google account, they let you restore that subscription. Email us to have them removed too.

Children

The service is for business owners and operators who are at least 18. It is not directed at children, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

Security

We use reasonable administrative and technical safeguards designed to protect personal information, including encrypted connections and hashed sign-in keys. No method of transmission or storage is completely secure. If a security breach affects your personal information, we will notify you, and the North Carolina Attorney General where required, as North Carolina’s Identity Theft Protection Act (G.S. 75-65) and other applicable laws require.

Where your information is processed

We operate from the United States, and our service providers process information in the United States. If you use the service from outside the United States, your information will be processed in the United States.

Changes

We may update this policy as the product changes. We will post the new version on this page and change the effective date. If a change materially affects how we use personal information, we will tell you in the app or by email before it applies.

Contact

PolyWise
North Carolina, United States
hello@getpolywise.com