Privacy Policy

• Account details: your email address, and the name and profile photo you add or that Google or Apple share when you sign in with them.
• Finance records you enter: transactions, categories, budgets, savings goals, dues, recurring entries, groups and the people you add to them, and your settings.
• Imported files: CSV or Excel statements are read in your browser or on your device; only the rows you choose to import are saved.
• Receipts: receipt text is recognised in your browser or on your device. Receipt images are not uploaded; only the details you save become a transaction.
• Android SMS detection (optional): if you turn it on, the app reads bank and payment SMS on your phone to suggest transactions. A suggestion, including the message text, is saved to your account only until you review it; the message text is removed when you approve or dismiss it.
• Billing details: your plan, subscription status and renewal dates. Card and payment details go directly to our payment provider and never reach us.
• Technical data: hosting providers keep standard request logs (such as IP address, browser type and time). Our own error logs record only the page and an error identifier, never your financial records.

We do not use advertising, analytics or tracking cookies, and we do not sell or rent personal data.

• To create your account, keep you signed in and sync your records across devices.
• To show your dashboard, budgets, goals, reports and shared group balances.
• To run Cashup Plus subscriptions and apply plan limits.
• To send account emails such as address confirmation and password resets.
• To keep the service secure, prevent abuse and fix problems.

We process this data because you asked us to provide the service when you created an account. You can withdraw consent at any time by deleting your account.

We use these providers to run Cashup. Each only receives what it needs for its job:

• Supabase: account sign-in, database and file storage.
• Netlify: hosting for this website.
• Google and Apple: only if you choose to sign in with them.
• Dodo Payments: merchant of record for Cashup Plus. It processes payments, taxes, invoices and refunds under its own privacy policy.
• jsDelivr: delivers the receipt-recognition engine to your browser when you first scan a receipt. It sees your IP address, not your receipt.
• GitHub: stores encrypted backups that only we can decrypt.

These providers may store data on servers outside India. We only use providers that protect it with industry-standard security.

If you add someone to a group, they can see that group’s expenses and the email addresses of its members. If you create a share link for dues, anyone with the link can see the listed dues, amounts and names (never contact emails) until the link expires after 7 days.

• Your records are kept while your account exists.
• When you delete your account in Settings, your records, groups you own, profile photo and sign-in are deleted immediately, and you are removed from groups owned by other people. If you have Cashup Plus, end the subscription in Manage billing first.
• Encrypted backups are deleted automatically within 30 days.
• Dodo Payments keeps payment and tax records for as long as the law requires.

You can:

• see and correct your records at any time in the app;
• export your transactions as a CSV file from Settings;
• delete your account and its data from Settings;
• ask us for a summary of the personal data we hold about you and who we have shared it with;
• nominate someone to exercise these rights if you die or become unable to; and
• raise a complaint with us, and if we do not resolve it, with the Data Protection Board of India.

Email support@cashupp.net for anything you cannot do in the app. We aim to respond within 30 days.

Data is encrypted in transit. Database rules ensure each account can only read its own records and the groups it belongs to. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

Cashup is meant for people aged 18 or older. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete it.

If we change this policy, we will update the date above and, for significant changes, tell you in the app or by email. Questions and grievances: support@cashupp.net, or see the contact page.