Privacy Policy

Last updated: September 8, 2026

1. Introduction

Cashflow Tracker ("we", "our", "app") is a personal finance tracking application. This privacy policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

• Email address — Collected when you sign in with Google. Used solely for authentication.
• Transaction data — Income, expenses, transfers, categories, payment modes, notes, and contacts you enter. This data is yours and stored only for your use.
• Recurring transaction templates — Templates for automatically generating recurring transactions, stored locally and synced to your account.
• Currency preference — Your selected display currency (45+ currencies supported).
• PIN hash — A hashed version of your 4-digit PIN, used to protect edit and delete actions. The raw PIN is never stored.
• Spaces data — When you create or join a Space (group expense splitting), your transaction data within that Space is visible to all Space members. Space members can see transaction amounts, categories, notes, and who paid.
• Subscription status — Account creation date and subscription expiry date, used to manage your access.
• Advertising ID and device information — Collected by Google AdMob for displaying ads. This includes your device advertising ID, device model, operating system version, screen resolution, and network type. This data is collected and processed by Google and is subject to Google's Privacy Policy.

3. How We Store Your Data

• Your data is stored in Firebase Firestore (Google Cloud) and browser local storage on your device.
• Personal transactions are stored as individual documents in your private Firestore subcollection, accessible only by you and the app administrator.
• Space data is stored in shared Firestore documents, accessible by all Space members.
• Data is synced between your devices using your Google account.
• Data is encrypted in transit via HTTPS and encrypted at rest by Firebase/Google Cloud.
• We use Google AdMob, a third-party advertising service, to display ads. AdMob collects device information as described above and is governed by Google's Privacy Policy.

4. How We Use Your Data

• To provide the core functionality of the app (tracking cashflow, generating reports, splitting expenses in Spaces).
• To sync your data across your devices.
• To display shared expense data to Space members.
• To protect your edit/delete actions via PIN verification.

5. Data Sharing

We do not sell or trade your personal data (transactions, contacts, notes) with any third parties.

Advertising: We use Google AdMob to display ads. Google AdMob may collect and process device identifiers (Advertising ID), device information, and usage data for ad personalization and measurement. This data is collected and controlled by Google and is subject to Google's Privacy Policy. You can opt out of personalized ads in your device settings.

Spaces: When you join a Space, your transaction data within that Space (amounts, categories, notes, who paid) is visible to all members of that Space. This is by design for group expense splitting. Your personal transactions outside of Spaces remain private.

Referrals: When you use the "Refer a Friend" feature, a share link is sent via your device's native sharing mechanism. We do not track who receives the link.

6. Data Security

• All data transmission occurs over encrypted HTTPS connections.
• Data at rest is encrypted by Firebase/Google Cloud infrastructure.
• Access to your personal data is restricted to your authenticated Google account and the app administrator.
• We do not store passwords — authentication is handled entirely by Google Sign-In.
• Your PIN is stored as a one-way hash and cannot be reversed.

7. Data Deletion

You can delete all your data at any time from within the app:

• Go to Settings → Delete Account.
• This will permanently delete all your Firestore data (transactions, profile, meta), remove you from all Space memberships, clear local storage, and delete your Firebase Authentication account.
• This action is irreversible.

You may also contact the administrator at amenterprises1031@gmail.com to request data deletion.

8. Data Retention

Your data is retained for as long as your account exists. When you delete your account, all data is permanently removed within 30 days.

9. Third-Party Advertising (Google AdMob)

This app uses Google AdMob to serve ads. Google AdMob may collect the following information:

• Advertising ID (AAID)
• Device model and manufacturer
• Operating system version
• Screen resolution and density
• Network type and carrier
• Language and time zone settings
• App interaction data (ad impressions, clicks)

This data is collected and processed by Google. For more information on how Google handles this data, please review Google's Privacy Policy.

You can opt out of personalized advertising by:

• Visiting Google Ads Settings
• On your Android device, going to Settings → Google → Ads and opting out of "Delete advertising ID"

10. Children's Privacy

This app is not intended for users under the age of 13. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

12. Contact

If you have any questions about this privacy policy, please contact us at amenterprises1031@gmail.com.