Privacy Policy

1. Information We Collect

1.1 Personal Information

• • Account registration details (email address, name)
• • Device information and identifiers
• • Usage data and app analytics
• • Support communications and feedback

1.2 Financial Information via Plaid

When you choose to connect your bank accounts through Plaid Technologies, Inc. ("Plaid"), we may collect and process the following financial data:

• • Bank account information (account numbers, routing numbers, account types)
• • Transaction history and details (up to 24 months)
• • Account balances and available funds
• • Institution and account holder information
• • Transaction categorization and merchant data

1.3 Manually Entered Data

• • Budget categories and spending limits you set
• • Manual transaction entries
• • Notes and tags you add to transactions
• • Preferences and settings

2. How We Use Your Information

2.1 Primary Purposes

• • Provide budget tracking and expense management services
• • Sync data between your iPhone and Apple Watch
• • Automatically categorize transactions using AI
• • Generate spending insights and budget recommendations
• • Send notifications about budget limits and financial goals

2.2 Service Improvement

• • Enhance app functionality and user experience
• • Develop new features and improve existing ones
• • Analyze usage patterns to optimize performance
• • Provide customer support and resolve technical issues

2.3 Legal and Security

• • Comply with legal obligations and regulatory requirements
• • Detect, prevent, and address fraud and security issues
• • Protect the rights, property, and safety of our users
• • Enforce our Terms of Service

3. Plaid Integration and Data Sharing

3.1 Plaid Services

Cashual uses Plaid to securely connect to your bank accounts. Plaid provides the technology that allows Cashual to access your financial account information. When you link your accounts:

• • You directly provide your banking credentials to Plaid, not to Cashual
• • Plaid securely retrieves your account information using bank-level security
• • Plaid shares only the data you authorize with Cashual
• • You can revoke this access at any time through your bank or Plaid

3.2 Data Processing Agreement

Cashual and Plaid have entered into data processing agreements to ensure your financial information is handled securely and in compliance with applicable privacy laws. Plaid's privacy policy governs their collection and use of your information when providing services to Cashual.

3.3 Your Control

• • You can disconnect your bank accounts at any time
• • You control which accounts to connect and share
• • You can request deletion of your financial data
• • You can review and modify permissions through your account settings

4. Data Storage and Security

4.1 Local Storage

Cashual prioritizes your privacy by storing your financial data locally on your devices:

• • Transaction data is stored using SwiftData on your iPhone and Apple Watch
• • Data synchronization occurs directly between your devices
• • No financial data is stored on external servers without your explicit consent
• • Local data is encrypted and protected by device-level security

4.2 Cloud Services

For features that require cloud processing (such as AI-powered categorization), we use industry-standard security measures:

• • Data is encrypted in transit using TLS 1.2 or higher
• • Cloud storage uses AES-256 encryption at rest
• • Access controls and authentication protect against unauthorized access
• • Regular security audits and monitoring

4.3 Data Retention

• • Financial data is retained only as long as necessary for service provision
• • You can request immediate deletion of your data
• • Anonymized usage data may be retained for service improvement
• • Legal requirements may require longer retention periods

5. Information Sharing and Disclosure

5.1 No Sale of Data

We do not sell, rent, or trade your personal or financial information to third parties.

5.2 Service Providers

We may share information with trusted service providers who assist us in operating our app:

• • Plaid (for bank account connectivity)
• • Cloud infrastructure providers (with encryption)
• • Analytics services (aggregated, anonymized data only)
• • Customer support tools

5.3 Legal Requirements

We may disclose information when required by law, such as:

• • Compliance with legal process (subpoenas, court orders)
• • Protection of rights, property, or safety
• • Investigation of fraud or security breaches
• • Enforcement of our Terms of Service

6. Your Rights and Choices

6.1 Data Access and Control

• • Access: View all personal data we have about you
• • Correction: Update or correct inaccurate information
• • Deletion: Request complete removal of your data
• • Portability: Export your data in a machine-readable format
• • Objection: Opt out of certain data processing activities

6.2 Communication Preferences

• • Manage notification settings within the app
• • Opt out of marketing communications
• • Choose which budget alerts to receive
• • Control data sharing preferences

6.3 Account Management

• • Disconnect bank accounts at any time
• • Delete your account and all associated data
• • Change privacy settings and preferences
• • Review connected services and permissions

7. International Data Transfers

Cashual operates primarily in the United States. If you are located outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

We ensure appropriate safeguards are in place for international transfers, including encryption, access controls, and compliance with applicable privacy frameworks.

8. Children's Privacy

Cashual is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information immediately.

If you believe that a child has provided personal information to us, please contact us immediately at the email address provided below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• • We will update the "Last Updated" date at the top of this policy
• • We will notify users of material changes through the app or email
• • We will provide a 30-day notice period for significant changes
• • Continued use of the app constitutes acceptance of the updated policy

10. Contact Information

If you have any questions about this Privacy Policy, your personal information, or our privacy practices, please contact us:

11. Additional Resources

For more information about data protection and your rights:

• • Plaid Privacy Policy and Legal Information
• • Cashual Terms of Service
• • FTC Guide to Personal Information Security