Privacy Policy

Our Privacy Commitment

Cashflow is designed with privacy as a core principle. We do not connect to your bank accounts. Your Gmail credentials are handled via Google OAuth — we never see or store your Gmail password. To classify transactions, only the merchant name extracted from your emails is sent to our transaction classification provider; no other email content, transaction amounts, or personal data is transmitted.

Information We Collect

We collect only the information necessary to provide the Cashflow service:

• Account information: Your email address when you create an account. This is stored securely with our authentication and data storage provider.
• Usage and error monitoring: We use anonymized usage analytics and error monitoring services to improve the app. This data does not include personal identifiers or the content of your emails.
• Transaction data: Transaction information extracted from emails is stored only on your device. We do not collect or store your transaction data on our servers.

Google Gmail API Access

Cashflow requests access to your Gmail account via the Google Gmail API with the following restricted scope:

• https://www.googleapis.com/auth/gmail.readonly — Read-only access to your Gmail messages.

Through this scope, we access the following Gmail data fields for emails that match transaction-related patterns:

• Email sender (From header): Used to identify the merchant or financial institution that sent the email.
• Email subject line: Used to detect transaction-related emails and extract merchant or purchase context.
• Email body content (plain-text and HTML): Used to extract the merchant name, and in some cases transaction amounts and dates, from purchase receipts, payment confirmations, and bank alerts.
• Email date/time: Used as the transaction date for display in the app.
• Message ID: Used to deduplicate transactions and avoid processing the same email more than once.

We access only emails that match patterns associated with transaction-related messages (such as purchase receipts, payment confirmations, and bank alerts). Most email processing happens on-device. For transaction classification, only the merchant name extracted from an email is sent to our transaction classification provider to categorise the transaction. The full email content, transaction amounts, and any other personal data remain on your device and are never sent to external providers or our servers. We do not scan or transmit the content of non-transaction emails, and no human at Cashflow ever reads your emails.

How We Use Your Information

We use the information we collect solely for the following purposes:

Raw Google user data

• Email sender, subject, body, and timestamp: Used exclusively to identify transaction-related emails in your Gmail inbox and extract merchant names, transaction amounts, and transaction dates for display within the app. Only the merchant name is sent to our transaction classification provider to classify the transaction category.
• Message ID: Used to deduplicate transactions so the same email is not processed more than once.

Aggregated and anonymized data

• Anonymized usage analytics: Our analytics provider collects anonymized usage metrics (such as feature interactions and screen views) to help us improve the app. This data does not include Gmail content, transaction details, or personal identifiers.
• Anonymized error reports: Our error monitoring provider collects error diagnostics (such as stack traces and device information) to help us identify and fix bugs. This data does not include Gmail content, transaction details, or personal identifiers.

Account and communication

• To create and maintain your account.
• To communicate with you about your account or the service.

Data Storage & Retention

Account information (your email address) is stored with our authentication and data storage provider with encryption at rest, and is retained for as long as your account remains active. You may request deletion of your account and all associated data at any time by contacting us. Account deletion removes your email address from our provider and immediately terminates all access to your Gmail data through the app.

Google user data (Gmail)

Raw Gmail data (email content, sender, subject, body, and timestamps) is accessed via the Google Gmail API and processed on-device in memory only. This raw data is not persisted to any server-side database or log and is discarded from memory once processing is complete. We do not cache or store the contents of your emails on our servers at any time.

Extracted transaction data (merchant name, transaction amount, date, and category) is stored locally in a SQLite database on your device. This data never leaves your device and is not backed up to our servers. You can delete this data at any time by removing the app or clearing the app's local storage through your device settings. Aside from the merchant name sent to our transaction classification provider, no other email content is transmitted to or stored by Cashflow.

When you revoke Cashflow's Gmail access through your Google Account permissions page, the app immediately stops scanning new emails. However, transaction data already extracted and stored locally on your device is not automatically deleted — you must clear the app's local storage or uninstall the app to remove it.

Aggregated and anonymized data

Anonymized usage analytics and error reports are retained in accordance with each service provider's standard data retention policies. This data does not contain Google user data, Gmail content, or personal identifiers, and cannot be used to identify individual users.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to anyone. We share data only in the following limited circumstances:

Google user data shared with third parties

• Transaction classification provider: Only the merchant name extracted from Gmail messages is sent to our classification provider for transaction categorisation. No other Google user data — no email content, sender addresses, subject lines, timestamps, transaction amounts, or personal identifiers — is shared with this provider.
• Authentication and data storage provider: Stores only your account email address (used for login). This provider does not receive any raw or aggregated Google user data from Gmail.
• Analytics and error monitoring providers: Process only anonymized usage and error data that does not include Gmail content, transaction details, or personal identifiers. They do not receive any raw Google user data.

Other sharing circumstances

• Legal obligations: We may disclose information if required to do so by law or in response to a valid legal request.

We do not transfer Gmail data to any third party except as necessary to provide the Cashflow service (for example, displaying transaction summaries within the app) or to comply with applicable law.

Google API Services User Data Policy & Limited Use

Cashflow's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access Gmail data to identify transaction-related emails and display financial summaries within the app.
• We do not use Gmail data for advertising, market research, or building user profiles.
• We do not transfer Gmail data to third parties except as necessary to provide or improve the core user-facing features of Cashflow.
• We do not allow humans to read your Gmail data unless we have your explicit consent, it is necessary for security purposes, or it is required to comply with applicable law.

Your Rights & Choices

You have the following rights regarding your data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your account information at any time.
• Deletion: You may delete your account and all associated data by contacting us. Local transaction data can be deleted at any time by removing the app.
• Revoke Gmail access:You may revoke Cashflow's access to your Gmail account at any time through your Google Account permissions page. Revoking access will prevent the app from scanning new emails, but will not delete data already stored on your device.

Security

We implement appropriate technical and organisational measures to protect your data:

• Google user data (Gmail): All communication with the Google Gmail API occurs over encrypted TLS (HTTPS) connections. Email content accessed via the Gmail API is processed on-device and is never transmitted to or stored on our servers. Raw Gmail data is held only in memory during processing and is not persisted in any server-side database or log. The local SQLite database where extracted transaction data is stored on your device is sandboxed by the operating system and accessible only to the Cashflow app.
• Account data: Your email address and authentication credentials are stored with our data storage provider using encryption at rest (AES-256) and are transmitted over encrypted TLS connections.
• Data in transit: All data transmissions between the app, our servers, and third-party services are encrypted using TLS.
• On-device storage: Because transaction data extracted from your emails is stored locally on your device and never transmitted to our servers, the risk of a server-side data breach exposing your financial information is materially reduced.

Children's Privacy

Cashflow is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through the app. The date at the top of this page indicates when it was last revised.

Contact Us

If you have questions about this privacy policy, wish to exercise your data rights, or need to report a privacy concern, please contact us at:

Email: [email protected]