Privacy Policy

Introduction

Welcome to CashFlow. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our mobile application and website.

By using CashFlow, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

When you create an account or use CashFlow, we may collect:

• Account Information: Name, email address, phone number, profile picture
• Authentication Data: Password (encrypted), authentication tokens, session information
• Google Account Data: If you sign in with Google, we receive your name, email, and profile picture from Google
• Contact Information: Names and phone numbers of people you add to groups or khata entries

Financial Information

To provide our expense tracking services, we collect:

• Expense Data: Transaction amounts, descriptions, categories, dates, and participants
• Khata Records: Credit and debit entries, customer names, payment status, due dates
• Group Information: Group names, members, shared expenses, settlement records
• Payment Data: We do NOT store your bank account numbers, credit card details, or UPI PINs. Payments are processed through secure third-party payment gateways.

Usage Information

We automatically collect certain information about how you use CashFlow:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Log Data: App usage patterns, features accessed, session duration, crash reports
• Location Data: Approximate location based on IP address (we do NOT track precise GPS location)
• Communication Data: When you contact support, we collect your messages and correspondence

How We Use Your Information

We use your information for the following purposes:

To Provide Our Services

• Create and manage your account
• Track and manage your expenses, khata, and group transactions
• Send WhatsApp reminders for pending payments (with your consent)
• Calculate splits, balances, and settlements
• Generate expense reports and insights

To Communicate With You

• Send you important account notifications and updates
• Respond to your support requests and inquiries
• Send you product announcements and feature updates
• Request feedback and conduct surveys (optional)

To Improve Our Services

• Analyze usage patterns to understand how people use CashFlow
• Identify and fix technical issues and bugs
• Develop new features based on user needs
• Enhance user experience and app performance

For Security and Legal Compliance

• Detect and prevent fraud, spam, and abuse
• Protect against security threats and unauthorized access
• Comply with legal obligations and law enforcement requests
• Enforce our Terms of Service

How We Share Your Information

We do NOT sell your personal information to third parties. We only share your data in the following limited circumstances:

With Your Consent

• When you add someone to a group or khata entry, we share relevant expense information with them
• When you send WhatsApp reminders, we share payment details with the recipient

With Service Providers

We work with trusted third-party service providers who help us operate CashFlow:

• Cloud Hosting: Render.com (for backend infrastructure)
• Database: MongoDB Atlas (for data storage)
• Email Services: Resend (for sending emails from support@cashflowapp.online)
• WhatsApp Messaging: Twilio (for sending WhatsApp reminders)
• Authentication: Google OAuth (if you sign in with Google)
• Payment Processing: Razorpay or similar (for premium subscriptions)

These service providers are contractually obligated to protect your data and use it only for the services they provide to us.

For Legal Reasons

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Protect the rights, property, or safety of CashFlow, our users, or the public
• Investigate fraud, security incidents, or violations of our Terms of Service

Business Transfers

If CashFlow is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Data Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption: All data transmission uses HTTPS/TLS encryption. Passwords are hashed using bcrypt.
• Secure Storage: Data is stored in secure, encrypted databases with access controls
• Authentication: Multi-factor authentication and secure session management
• Regular Audits: We conduct security audits and vulnerability assessments
• Access Controls: Limited employee access to user data on a need-to-know basis
• Monitoring: Automated monitoring for suspicious activity and unauthorized access attempts

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (e.g., financial record keeping)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal compliance (e.g., transaction records for tax purposes may be retained for 7 years).

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal data in a machine-readable format
• Export your expense data, khata records, and reports

Correction

• Update or correct your account information directly in the app
• Contact us to correct inaccurate or incomplete data

Deletion

• Delete your account from the app settings
• Request deletion of specific data by contacting support
• Note: Deletion may not be possible for data in shared groups or required for legal compliance

Opt-Out

• Unsubscribe from promotional emails using the unsubscribe link
• Disable WhatsApp reminders in app settings
• Manage notification preferences in your device settings

Objection and Restriction

• Object to processing of your data for certain purposes
• Request restriction of processing under certain circumstances

To exercise these rights, contact us at support@cashflowapp.online

Children's Privacy

CashFlow is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use CashFlow to improve our services

You can control cookies through your browser settings. Disabling cookies may affect the functionality of CashFlow. Learn more in our Cookies Policy.

Third-Party Links and Services

CashFlow may contain links to third-party websites, apps, or services (e.g., payment gateways, Google sign-in). We are not responsible for the privacy practices of these third parties.

We encourage you to read the privacy policies of any third-party services you interact with through CashFlow.

International Data Transfers

CashFlow is operated from India. If you are accessing CashFlow from outside India, your information may be transferred to, stored, and processed in India or other countries where our service providers operate.

By using CashFlow, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email or in-app notification
• Post the updated policy on our website

Your continued use of CashFlow after the changes take effect constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context:

• Contract Performance: To provide the services you've requested (expense tracking, khata management)
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: When you've given explicit consent (e.g., WhatsApp reminders, marketing emails)
• Legal Obligation: To comply with applicable laws and regulations

You have the right to withdraw consent at any time, object to processing, and lodge a complaint with your local data protection authority.