Cash Flow

Privacy Policy

Last Updated: April 22, 2026

We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and the choices you have.

01Introduction

This Privacy Policy describes how Cash Flow ("we," "us," or "our") collects, uses, and shares information when you use our mobile application ("App"). We are committed to protecting your privacy and handling your data transparently.

02Information We Collect

2.1 Information You Provide

When you use the App, you may provide:

  • Financial data: Transactions (amounts, dates, categories, notes), budgets, savings goals, recurring bills, debt accounts
  • Profile information: Display name, monthly income, currency preference
  • Receipts and documents: Images or PDFs you capture or upload for scanning
  • Voice input: Audio recordings used for transaction logging (processed locally on your device)

2.2 Information Collected Automatically

We automatically collect:

  • Usage data: Feature interactions, error logs, and crash reports to improve App stability
  • Device information: Device model, operating system version, and App version
  • Anonymous user identifier: A randomly generated anonymous ID via Firebase Authentication to associate your App session (no personal identity is tied to this ID)
  • Subscription status: Whether you have an active Cash Flow Pro subscription, managed via RevenueCat

2.3 Information from Third Parties

We receive information from:

  • RevenueCat: Provides subscription and purchase status information
  • Google AdMob: If ads are displayed, Google may collect device advertising identifiers and usage data in accordance with Google's Privacy Policy

03How We Use Your Information

We use the information collected to:

  • Operate and improve the App
  • Provide AI-powered features (budget analysis, transaction autofill, paycheck planning, document scanning)
  • Manage your subscription and in-app purchases
  • Display personalized advertisements (if applicable)
  • Diagnose technical issues and crashes
  • Comply with legal obligations

04Data Storage

4.1 Local Storage

All of your financial data — transactions, budgets, savings goals, recurring bills, debt accounts, profile settings, and generated avatars — is stored locally on your device. We do not upload or sync your financial data to our own servers.

4.2 AI Processing

When you use AI features, the following data is temporarily transmitted to Google's Vertex AI (Gemini) service for processing:

  • Transaction details and history
  • Budget allocations
  • Savings goals, recurring bills, and debt accounts
  • Receipt or document images (for document scanning)

This data is sent only during the AI request and is not retained by us on any external server after the response is generated. Google's data handling for Vertex AI is governed by Google's Cloud Privacy Notice.

4.3 Avatar Generation

If you use the AI avatar feature, your display name and demographic hints (gender, ethnicity) are sent to Runware's API to generate a profile image. The generated image is then stored locally on your device. We do not retain this information after the image is delivered.

05Information Sharing

We do not sell your personal information. We share information only in the following limited circumstances:

RecipientData SharedPurpose
Google Vertex AI (Gemini)Financial data, receipt/document imagesAI feature processing
Google FirebaseAnonymous user IDApp infrastructure, authentication
Google AdMobDevice identifiers, ad interaction dataAdvertising
RevenueCatPurchase events, subscription statusSubscription management
RunwareDisplay name, demographic hintsAI avatar generation
Meta (Facebook)Shared content (user-initiated)Social sharing

We may also disclose information if required by law or to protect the rights, property, or safety of us, our users, or others.

06Permissions

The App requests the following device permissions:

PermissionUseRequired
MicrophoneVoice transaction loggingOptional
Speech Recognition (iOS)Transcribing voice inputOptional
CameraScanning receipts and documentsOptional
Photo Library (iOS)Importing receipt imagesOptional

All permissions are requested only when you attempt to use the relevant feature. You may deny any permission; this will only disable the associated feature and will not affect core App functionality.

07Advertising

The App may display advertisements served by Google AdMob. Google may use your device's advertising identifier (IDFA on iOS) and usage data to serve personalized ads. You can opt out of personalized advertising at any time through your device settings:

  • iOS: Settings → Privacy & Security → Apple Advertising → turn off Personalized Ads

We do not control the content of third-party advertisements. Google's advertising practices are governed by Google's Privacy Policy.

08Children's Privacy

The App is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete it promptly. If you believe we have collected information from a child under 13, please contact us at psionictypo@gmail.com.

09Data Security

We take reasonable technical and organizational measures to protect your information. Your financial data is stored locally on your device and protected by your device's built-in security features (including optional PIN lock within the App). Data transmitted to third-party AI services is sent over encrypted connections (HTTPS/TLS). However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10Data Retention

Since your financial data is stored locally on your device, it is retained until you delete the App or manually clear the App's data. Data sent to third-party services (Google Vertex AI, Runware) for processing is not retained by us after the request is fulfilled. RevenueCat retains purchase records in accordance with their own retention policies.

11Your Rights and Choices

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Opt out of personalized advertising (see Section 7)

Since most of your data is stored locally on your device, you have direct control over it at all times. To exercise any rights regarding data held by third-party services we use, please contact those services directly. For any other requests, contact us at psionictypo@gmail.com.

12California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion of your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at psionictypo@gmail.com.

13International Users

The App is operated from and data is processed within the United States and regions where our third-party providers operate (including Google's global infrastructure). By using the App, you consent to the transfer of your information to these regions, which may have different data protection laws than your country of residence.

14Third-Party Links and Services

The App integrates with third-party services whose privacy practices are independent of ours. We encourage you to review the privacy policies of:

  • Google: https://policies.google.com/privacy
  • Meta (Facebook): https://www.facebook.com/policy.php
  • RevenueCat: https://www.revenuecat.com/privacy

15Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after any changes constitutes your acceptance of the updated policy.

16Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: Email: psionictypo@gmail.com

By using Cash Flow, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.