Privacy Policy

Cashly is a personal finance application that helps users:

• Record income and expenses
• Organize transactions
• Manage budgets
• Analyze spending
• Generate financial reports
• Receive financial notifications
• Customize language and currency preferences
• Use supported automatic transaction-detection features

Cashly is a personal finance management tool and does not provide banking, investment, tax, accounting, lending, or other regulated financial advice or services.

We collect only information needed to provide and improve Cashly.

2.1 Account Information

When you create or use a Cashly account, we may collect:

• Name
• Email address
• Phone number, where provided
• Firebase Authentication user identifier
• Profile image, where provided
• Account creation and login information
• Account status

2.2 Financial Information

Cashly may store information that you choose to enter or that is generated through supported transaction-detection features, including:

• Income transactions
• Expense transactions
• Transaction amount
• Transaction type
• Category
• Payment method
• Transaction date/time
• Description
• Notes
• Tags
• Merchant information
• Budget information
• Analytics and financial summaries
• Reports
• Receipt references or uploaded receipt images, where the feature is used

Financial information is used solely to provide the personal finance functionality of Cashly and related service operations.

Cashly may provide an Automatic Transaction Detection feature on supported Android devices. When you explicitly enable this feature and grant the required Android permissions, Cashly may access eligible financial transaction SMS messages for the purpose of identifying transaction information such as:

• Debit/credit status
• Transaction amount
• Merchant
• Transaction date/time
• Financial institution or sender
• Relevant transaction reference information

The purpose is to reduce manual transaction entry and automatically create transaction records.

Important

• Cashly does not access SMS messages for advertising or unrelated profiling.
• Cashly is designed to process only information relevant to the financial transaction-detection feature and should not upload unrelated personal SMS history.
• We do not intentionally use unrelated SMS content for advertising, selling data, or unrelated purposes.
• Google Play treats SMS and financial information as sensitive data and imposes specific restrictions and disclosure requirements. Cashly will request such permissions only when the associated feature is supported and permitted for the applicable distribution channel.

User Control

• You can disable automatic transaction detection through Cashly settings or by revoking the relevant Android permissions through your device settings.
• If you deny the permission, you can continue using supported manual transaction-entry functionality.

Depending on your device, configuration, and enabled features, Cashly may process:

• Device information
• Operating system/version
• App version
• Crash/error information
• Firebase Authentication identifiers
• Firebase Cloud Messaging (FCM) token
• Device token
• Network/connectivity state
• Basic usage/diagnostic information necessary to operate the Service

We use this information primarily for:

• Authentication
• Notifications
• Security
• Troubleshooting
• Reliability
• Service functionality

We do not use sensitive financial or SMS information for advertising purposes.

Cashly may allow transaction records to contain optional location information if you explicitly use a feature that records transaction location. Cashly does not require location access for ordinary expense tracking unless a specific feature requires it.

If Cashly provides receipt or document-upload functionality, the app may request camera or photo-library access. This data is used to:

• Capture receipts
• Attach receipts to transactions
• Help you maintain transaction records

Access occurs only when you use the relevant feature and grant the required permission.

Cashly may use Firebase Cloud Messaging (FCM) or supported notification services to send:

• Budget alerts
• Transaction notifications
• Financial reminders
• Reports
• Account/security notifications
• Service updates

You can control notification permissions through Cashly and/or your device settings, subject to platform behavior.

Cashly stores your selected:

• Language
• Currency

For example:

{
  "language": "en",
  "currency": "INR"
}

These preferences are used to customize the application interface and monetary formatting. They may be stored locally on your device and associated with your Cashly account so they can be restored when you sign in on another supported device.

We may use information to:

• Create and manage your Cashly account.
• Authenticate users.
• Store and display transactions.
• Calculate balances and financial summaries.
• Provide budgeting functionality.
• Generate analytics and reports.
• Provide notifications and reminders.
• Provide automatic transaction detection where enabled and permitted.
• Remember language, currency, theme, and other preferences.
• Secure the Service.
• Detect errors and improve reliability.
• Respond to support requests.
• Comply with applicable legal requirements.

We will not use your financial or SMS data for a purpose incompatible with the purpose disclosed to you.

Cashly may use third-party infrastructure and service providers such as:

• Firebase Authentication
• Firebase Firestore
• Firebase Cloud Messaging
• Other infrastructure, storage, analytics, crash-reporting, or service providers actually integrated into the released application

These providers may process information on our behalf to deliver the Service. Our actual third-party SDK usage and data practices will be reflected in the app's applicable store privacy/data disclosures.

We do not sell your personal information. We may disclose information:

• To service providers — To infrastructure and technology providers that help us operate Cashly.
• For legal compliance — When disclosure is required by applicable law, regulation, court order, or lawful governmental request.
• For security — When reasonably necessary to protect users, Cashly, our systems, or the public from fraud, abuse, security incidents, or unlawful activity.

Business transfers

If Cashly is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to applicable law and reasonable privacy protections.

Cashly does not sell your:

• Financial information
• Transaction history
• SMS transaction information
• Account information
• Personal information

to third parties for advertising or unrelated commercial purposes.

We use reasonable technical and organizational safeguards intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These may include:

• Firebase authentication
• User-specific access controls
• Firestore security rules
• Secure network communication
• Restricted database access
• Permission-based access to sensitive device features

However, no internet-connected system can be guaranteed to be completely secure.

Cashly is designed so that authenticated users can access only their own account and associated financial records. Your account data is associated with your authenticated Cashly/Firebase user identity. We do not intend to expose one user's transaction information to another user.

We retain information only for as long as necessary to provide Cashly, maintain legitimate business and security purposes, comply with legal obligations, resolve disputes, or enforce agreements. When you request deletion of your account, we will delete or anonymize applicable personal information in accordance with our technical capabilities and applicable legal requirements. Some limited records may need to be retained where required by law, security, fraud prevention, dispute resolution, or other legitimate purposes.

You may request deletion of your Cashly account and associated personal data.

• In-app deletion: [Add exact in-app path, e.g. Settings → Account → Delete Account]
• Email request: [privacy@cashly.app]

When a valid deletion request is received, we will process deletion of applicable account and associated user data in accordance with our retention obligations.

You can:

• Update account information
• Change language
• Change currency
• Disable notifications
• Disable automatic transaction detection
• Revoke device permissions
• Delete transactions where supported
• Request account deletion
• Contact us regarding your personal information

Some preferences may be stored locally for application functionality.

Cashly is not intended to knowingly collect personal information from children where such collection is prohibited by applicable law. If you believe a child has provided personal information to Cashly inappropriately, contact us at:

[privacy@cashly.app]

Depending on the services used to operate Cashly, your information may be processed or stored in countries other than your country of residence. Where applicable, we take reasonable steps to ensure appropriate protections for such processing.

Depending on your location and applicable law, you may have rights relating to your personal information, which may include:

• Access
• Correction
• Deletion
• Withdrawal of consent
• Restriction or objection to processing
• Data portability
• Complaint or grievance mechanisms

To exercise applicable rights, contact:

[privacy@cashly.app]

For users in India, privacy rights and notice/consent obligations may be governed by applicable Indian data-protection law.

We may update this Privacy Policy from time to time.

• When we make material changes, we may provide notice through the application, website, or other appropriate method.
• The updated policy will include a new "Last Updated" date.

Cashly

• Website: [https://www.cashly.app]
• Email: [support@cashly.app]
• Privacy: [privacy@cashly.app]
• Address: [Legal business address]