Draft, under legal review. This policy may change before MyCleanPay opens to the public.

Privacy Policy

Version 2026-10-draft

We keep as little as we can: enough to show what was paid, to whom and when, and nothing about your health or recovery.

What we collect

What	Why
Your first name and last initial, as you type them	To show your house who paid
Your mobile number	To text receipts and your payment history link, and to stop abuse. We store only a scrambled code made from the number (a keyed hash), not the number itself
Your house, what you paid for, amounts, dates and the weeks covered	Your receipt, your house's statement, and resolving any question about a payment
The price you were shown and the terms version you agreed to	Proof of what you agreed to pay
Payment references from Stripe	To match our records to Stripe's
Messages you send us for help	To answer you
For house owners and officers: name, email and sign-in details	To run the house's account

Card numbers or bank account numbers. Stripe collects those directly; they never reach us.
Health, treatment, drug testing, sobriety dates, legal history or anything about your recovery.
Your location, contacts or browsing history. We use no advertising trackers, no Meta Pixel, no Google Analytics and no session recording.

Your house sees your name as you typed it, what you paid for, amounts and dates.
Stripe processes your payment and collects your payment details, email and the device information it uses to prevent fraud, under Stripe's privacy policy. Stripe may email you its own receipt.
Service providers who run MyCleanPay for us: Microsoft (hosting, email and text messages) and Cloudflare (website security). They may use the data only to provide their service to us.
When the law requires it, for example a valid court order.

We don't sell personal information, and we don't share it for advertising.

We use three cookies, all needed for the site to work, and none for tracking:

mcp_d: a random ID for your browser, used to stop abuse such as repeated failed payments. Kept for a year.
mcp_me: your name, number and payment method, encrypted and kept on your own phone so you don't have to type them again. Kept for 180 days. "Not you?" deletes it.
A security cookie that protects forms against forgery, kept until you close the browser.

House owners and officers who sign in also get mcp_auth, which keeps them signed in for up to 8 hours of use.

Information	Kept for
The scrambled code made from your phone number	12 months after your last payment
Your name on payments	About 25 months, then replaced with "Member"
Amounts, dates and payment references	About 7 years, for tax and accounting records
Help requests	12 months after they are closed
Website logs	30 days, without phone numbers or payment details

Your house keeps its own copies of its statements under its own policies.

Clear what your phone remembers with "Not you?" on your house's page.
Reply STOP to any text from us to stop texts.
Ask us to see or delete your information: email us. We will delete your name and phone code from our records, but we keep payment amounts, dates and references where the law requires us to.

Data is encrypted in transit and at rest. Access is limited to the few people who need it to support a payment, and every staff action is logged.

MyCleanPay is for adults. We don't knowingly collect information from anyone under 18.

If we change this policy, we'll post the new version here with a new version number.

MyCleanPay, LLC, 2702 E Southern Hills Blvd, Springfield, MO 65804. support@mycleanpay.com.