CashFlowCashFlow

Legal

Privacy Policy

Last updated: May 26, 2025

Welcome to CashFlow ("CashFlow", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (https://cashflow.devaditya.dev).

Please read this policy carefully. If you disagree with its terms, please discontinue use of the app.

1. Information We Collect

1.1 Information You Provide

  • Account Data: Name, email address, and password when you register.
  • Financial Data: Income and expense transactions you manually enter, including amounts, categories, dates, and optional notes.
  • Feedback & Reports: Messages, ratings, and bug reports you voluntarily submit through the app.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, and in-app actions — used to improve the product.
  • Device Data: Device type, operating system version, browser type, and time zone.
  • Log Data: IP address, access timestamps, and error logs collected by our servers.
  • Cookies & Local Storage: We use a session cookie (cf_logged_in) for authentication routing. No advertising or third-party tracking cookies are used.

1.3 Information We Do NOT Collect

  • Bank account numbers, card numbers, or any payment credentials.
  • Government ID or tax information.
  • Location data.
  • Contacts or media from your device.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account.
  • Provide, operate, and maintain the CashFlow service.
  • Display your transaction history and analytics.
  • Send transactional emails (email verification, password reset).
  • Respond to your feedback, reports, and support requests.
  • Monitor and improve performance, security, and reliability.
  • Comply with legal obligations.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

3. How We Share Your Information

We only share data in limited circumstances:

  • Service Providers: Trusted vendors who assist in operating our infrastructure (e.g., hosting, email delivery). They are contractually obligated to protect your data.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger or acquisition, your data may be transferred. We will notify you beforehand.
  • With Your Consent: For any other purpose with your explicit permission.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. When you delete your account, we will permanently delete your personal data and transaction records within 30 days, except where we are required by law to retain certain information.

5. Data Security

We implement industry-standard security measures including:

  • HTTPS/TLS encryption for all data in transit.
  • Hashed passwords (bcrypt) — we never store plain-text passwords.
  • HttpOnly session cookies to mitigate XSS attacks.
  • Regular security audits and dependency updates.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request permanent deletion of your account and data. Use our Account Deletion page or email us.
  • Portability: Export your transaction data in CSV format (available in the app).
  • Withdrawal of Consent: Withdraw consent at any time by deleting your account.

To exercise any of these rights, contact us at schoolasium123@gmail.com.

7. Children's Privacy

CashFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Third-Party Links

Our app may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated “Last updated” date. Your continued use of the app after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy: