Porch PayLast updated: · Version 2026-08-09
Who we are
Porch Pay is a loan servicing app. Your loan is serviced by the company that gave you your login (your "Servicer"). The Servicer decides what data is collected about your loan and is the party responsible for it. Porch Pay provides the software the Servicer uses.
Information we collect
| Category | Examples | Why |
|---|---|---|
| Identity & contact | Name, email address, mobile phone number, mailing address | To create your account and communicate with you about your loan |
| Financial | Loan balance, payment amounts and dates, interest, escrow, fees, payoff figures | To service your loan and show you your account |
| Payment | Payment amount, method, confirmation identifiers | To process and record payments |
| Messages | Messages you send and receive in the app; notices sent to you and when you opened them | To communicate about your account and keep a record of notices delivered |
| Documents | Files your Servicer shares with you, such as insurance, tax, utility and loan documents | To give you access to your paperwork |
| Notification tokens | An anonymous device token issued by Apple or Google when you turn on notifications | To send notifications to your device. It identifies the device, not you, and is deleted when you turn notifications off or delete your account. |
| Consent records | When you accepted these terms, IP address, device/browser type | To prove consent was given, as required by law |
Payment information is handled by our processors, not by us
When you pay by card, bank transfer, or Cash App Pay, your payment credentials go directly to Stripe. We never see or store your full card number or bank account number. We receive only a confirmation that the payment was made and the amount. See Stripe's privacy policy.
We do not collect your location
Porch Pay does not ask for, collect, or store your location. The app requests no location permission on either iPhone or Android. An earlier version offered optional location sharing; that feature was removed and every location record it had gathered was deleted.
Messaging and electronic notices
By accepting these terms you agree to receive communications about your loan through the app, including account notices, late notices, and other notices about your loan. The app records when a notice was sent and when you opened it. Electronic delivery in the app may be provided in addition to — not instead of — any notice your Servicer is required by law or by your contract to send by mail or other means.
Who we share information with
- Your Servicer — the company servicing your loan sees all of your loan and account information.
- Payment processing — Stripe, to process payments you initiate and to store the card or bank account you save for future or automatic payments. Your card and bank details go to Stripe directly and are never held by us.
- Text messages and calls — Twilio, which carries the text messages and phone calls between you and your servicer. It receives your phone number and the content of those messages.
- Printed and certified mail — Lob, which prints and mails paper notices. It receives your name, the mailing address the notice goes to, and the contents of the letter.
- Email — the email provider your servicer has configured, which receives your email address and the contents of the messages sent to you.
- Push notifications — Google Firebase Cloud Messaging on Android, and Apple Push Notification service by way of Firebase on iOS. These receive a device token and the text shown in the notification. They do not receive your loan details.
- Address lookup — Google and the U.S. Census geocoding service, used to check that a property address is real and complete. They receive the address being looked up.
- Hosting — the infrastructure providers that run the app and store its data on our behalf.
- Legal — when required by law, subpoena, or to protect legal rights.
We do not sell your personal information, and we do not share it for advertising or cross-app tracking.
How long we keep your information
Loan and payment records are kept as long as required by law and by the terms of your loan, which is typically several years after the loan ends. Messages and notices are kept for the life of the loan.
Your choices and rights
- Access and export — download a copy of your data at any time from Settings → My data in the app.
- Delete your account — you can delete your account in the app under Settings → Delete account, or at porchpay/delete-account. This erases your login, contact information, consent records and notification tokens. Loan ledger entries are retained in de-identified form where the law requires the Servicer to keep lending records.
- Correct your information — message your Servicer in the app.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas), you may have additional rights to know, correct, delete, or limit use of your personal information. Contact your Servicer or use the app's export and delete tools to exercise them.
Security
Passwords are stored using salted cryptographic hashing, connections are encrypted in transit, and each Servicer's data is isolated so no company can access another's records. No system is perfectly secure; please use a strong, unique password and tell your Servicer immediately if you think your account has been accessed.
Children
Porch Pay is not directed to children and is not intended for anyone under 18. We do not knowingly collect information from children.
Changes to this policy
If we make material changes we will update the version above and ask you to accept the new version the next time you open the app.
Contact
Questions about your loan or your data: message your Servicer in the app, or see Support.