Privacy Policy

Last updated: May 2026 · Applies to all Cashy products and services.

The short version

We collect only what you give us. We don't sell your data. We don't track you across the web. Your financial information is stored securely and only you can access it.

What we collect

  • Account information: Email address and display name when you sign up.
  • Financial data you enter: Transactions, budgets, goals, subscriptions, and any other data you manually add to Cashy. We don't connect to your bank accounts.
  • Usage data: Basic analytics like feature usage counts (no personal content), to help us improve the product.
  • Device info: Browser type and OS version for bug reports. Never linked to your account.

What we do NOT collect

  • Bank account credentials or read access to any financial institution
  • Location data
  • Contacts, photos, or files beyond what you explicitly upload
  • Behavioral tracking across other websites or apps

How we use your data

Your data is used to:

  • Provide and improve the Cashy service
  • Power the AI advisor (your data stays in your account — it's not shared with the AI provider)
  • Send transactional emails (account confirmation, password reset)
  • Respond to support requests

We never use your financial data for advertising, profiling, or third-party enrichment.

Data storage and security

Your data is stored in encrypted databases. Passwords are never stored in plaintext — they use industry-standard hashing. All connections use HTTPS/TLS. See our Security page for technical details.

Your rights

  • Access: Export all your data at any time from Settings → Export Data.
  • Delete: Delete your account from Settings → Delete Account. All data is permanently removed within 30 days.
  • Correct: Edit any data directly in the app.
  • Portability: Download your data as CSV from Settings.

Cookies

We use session cookies for authentication only. No advertising cookies, no third-party tracking pixels.

Third-party services

We use a small number of trusted third parties to operate the service (authentication, database hosting, email delivery). Each is bound by confidentiality agreements and processes only the minimum data needed. We never sell data to any third party.

Contact

Questions about this policy? Contact us — we respond to all privacy questions within 48 hours.