Privacy Policy
Effective October 24, 2026
Dueday ("we") is a phone app and web dashboard that businesses use to collect monthly payments. This policy explains what we collect, why, and what you can do about it.
Who controls your data
The business you pay or work for decides who gets an account and what is recorded about them. We run Dueday for that business and handle the data on its behalf. Questions about a specific record are best sent to the business first; you can always reach us too.
What we collect
- Account details: your full name, login name, role (staff, collector or customer) and password, stored only as a secure hash.
- Customer details your business enters: mobile number, address, account number, plan, monthly due day and assigned collector.
- Payment records: amount, month paid for, date and time collected, who collected it, and receipt number.
- Collector cash records: other cash in and out (for example lunch or gasoline) and daily cash handovers.
- Business details: name, logo, category, short code and time zone.
- Security data: for staff, collectors and admins who use it, an authenticator-app secret for two-step sign-in.
- Technical data: sign-in sessions and the logs our hosting providers keep to run and secure the service.
We don't collect your location, contacts, photos or payment card details. Dueday doesn't take online payments. We don't send you emails or text messages.
How we use it
- To let you sign in and to show you the screens for your role.
- To record payments and cash, and to produce your business's daily and monthly reports.
- To keep accounts secure and to help when you contact support.
We don't sell your data, show ads, or use your data to profile you.
Who can see it
- Your business's staff see its customers, payments, collectors and cash records.
- Collectors see the customers assigned to them and their own cash records.
- Customers see only their own plan and payments.
- No business can see another business's data.
- We (the platform admin) can see business, account and payment records to set up businesses and give support.
Service providers
Dueday's database, sign-in and file storage run on Supabase, and the web dashboard runs on Vercel. They process data only to provide those services to us. Your data may be stored on servers outside your country.
How long we keep it
We keep records while your business uses Dueday. When an account is turned off, its past payments stay, because they are part of the business's financial records. When a business leaves Dueday, or asks us to delete an account, we delete or anonymize the data unless the law requires us to keep it.
Your choices
You can ask to see, correct or delete your personal data, or object to how it is used. Email support@cafie.app with your login and business name. We may check with your business before changing financial records. If you are in the Philippines, you can also contact the National Privacy Commission.
Security
Data is encrypted in transit. Each business's data is walled off from the others in the database itself. Admin access needs a password and an authenticator code. No system is perfectly secure, so please keep your password to yourself.
Children
Dueday is for businesses and their customers. It is not meant for children under 13.
Changes
We will update this page when the policy changes and change the date at the top.