Cashly1. Information Cashly handles
The information handled depends on the features you choose. Financial records can be sensitive; only enter information needed for your own record keeping.
- Account information: account identifier, sign-in provider, email address and profile information supplied by Apple or Google. Apple may provide a private relay email instead of your real address.
- Financial records you enter: income, expenses, dates, amounts, currencies, notes, wallets, categories, budgets, plans, loans, borrowings, repayments and debt collections.
- People and attachments you add: names and details entered for borrowers or lenders, images attached to records, and payment or QR information you choose to save or share. These contacts are records you create in Cashly, not an automatic copy of your phone address book.
- Family and sync information: workspace membership, invitations, authorship, updates and preferences required to coordinate shared records and devices.
- Technical information: device and app information, language, usage events, crash reports, notification tokens, advertising-related identifiers where permitted, and purchase records such as product and transaction identifiers.
- Support information: messages, screenshots and account information you voluntarily provide when requesting help.
2. Why information is used
- Provide transaction records, balances, charts, budgets, debt tracking and exports.
- Authenticate accounts, synchronize data and attachments, and operate family sharing.
- Deliver reminders and notifications you enable, and recognize eligible purchases or donations.
- Understand feature use, investigate crashes, maintain reliability and prevent misuse.
- Respond to support, recovery and privacy requests, including verifying ownership before restoring records.
3. Local storage, cloud sync and family sharing
Cashly stores records and preferences on your device. When you sign in and use synchronization, associated records and attachments are also processed through Firebase services to make them available across devices.
Records in a family workspace are available to its authorized members according to the app's permissions. Check the selected workspace before adding sensitive notes or attachments. Members may retain copies they have exported or shared.
Signing out, uninstalling the app or removing a local copy does not by itself mean that cloud data or the account has been deleted.
4. Device permissions and optional features
- Camera and selected photos: scan QR codes and choose or capture attachments when you use those features.
- Microphone and speech recognition: turn spoken input into text when you start voice entry. The device's speech service may process audio on its provider's servers, depending on the operating system and settings.
- Notifications: reminders and family activity notifications, subject to your permission and preferences.
- Biometric authentication: the operating system checks your fingerprint or face to unlock the app. Cashly does not receive your fingerprint or face template.
- You can manage permissions in device settings. Denying a permission may limit the corresponding feature.
5. Service providers and sharing
Cashly uses third-party services to deliver specific functions. They may process the data necessary for those functions under their own privacy terms. Information may also be disclosed where required by law or necessary to address fraud, security incidents or legal claims.
Providers used by the current app include Google/Firebase for authentication, databases, image storage, messaging, remote configuration, analytics and crash reporting; Apple and Google for sign-in and store transactions; and advertising services used by the app's advertising SDK. The device's speech service handles voice recognition.
Operational notifications may be sent through Telegram, including event type, app version, operating system and locale. The operational logging helper is designed to remove email addresses and identifiers and avoid transaction notes; crash diagnostics may contain technical error details.
When you export a file or use a share action, you choose the destination. That destination's handling of the copy is governed by its own practices.
6. Analytics, diagnostics and advertising
Firebase Analytics processes app usage events and technical identifiers to help understand how features are used. Crashlytics processes crash reports and diagnostics to investigate failures.
Where ads are enabled, advertising providers may process device identifiers, network information, ad interactions and other SDK data for ad delivery, measurement and fraud prevention. Consent or tracking permission is requested where applicable. Available advertising controls are provided in the app and your device settings.
Turning off ad display is not the same as disabling analytics or deleting information already processed by a provider.
7. Purchases and payment information
Store purchases and donations may produce product identifiers, transaction identifiers, price, currency and entitlement information. Payment processing is handled by the relevant store or payment provider; Cashly does not need your full card number or card security code for a store purchase.
Manually entered financial records, bank or QR details and wallet names are information you supply for record keeping. They do not give Cashly permission to transfer money from your bank account.
8. Retention and account deletion
Records are kept to provide record keeping and synchronization. Deleting an individual transaction normally marks it as deleted so that devices can synchronize the change; it does not immediately erase the stored record.
The app's Delete data control resets personal workspace records. When signed in, it requests deletion of the personal workspace's transaction, wallet, debt, contact, category, image-reference and plan collections on Firestore, then clears the device's local tables and image files. It also attempts to delete uploaded image files; an image deletion failure may require support follow-up. The workspace shell, cloud settings, user profile and sign-in account are retained.
This reset leaves the family workspace first and does not delete its shared cloud records. The cloud reset is limited to the caller's personal workspace. Other devices clear their local data when they receive the reset marker during synchronization. Offline devices and separately exported copies are not erased immediately by that request.
To request deletion of your account and associated information, contact the privacy email below with your sign-in email and a description of your request. We may ask for proof of account ownership and explain the scope of deletion, any information that needs separate handling and the expected processing time when responding. Resetting data is separate from deleting your sign-in account.
Local records, cloud data, uploaded images, diagnostics and support or recovery backups have different lifecycles. Contact us for information about retained copies and their deletion. Uninstalling the app does not by itself delete cloud data, revoke sign-in access or cancel a store subscription.
9. Your choices and requests
You can review and correct records in the app, use available export tools, manage family participation, and change device permissions. You can also request access, correction, export or deletion through the privacy contact. Additional rights may apply depending on where you live.
For account recovery or transfer, support may ask for examples of your own records and the destination account to verify ownership. Knowing a person's name alone is not enough to authorize disclosure or transfer of their financial history.
10. Security and international processing
Access controls, authenticated synchronization and transport security help protect information. App lock and device authentication provide additional controls on your device, but do not guarantee that all stored information is encrypted end to end. No storage or transmission method is completely secure.
Cloud, analytics, advertising and support providers may process information in countries other than your own. You may contact us for information about the providers and processing locations relevant to your data.
11. Children and other people's information
Cashly is a financial record-keeping app. Do not submit a child's information or another person's sensitive information unless you have an appropriate reason and authority. Contact the privacy team if you believe information has been submitted improperly.
12. Changes to this policy
The policy may be updated when features, providers or data practices change. The latest revision date is shown at the top of this page. Material changes will be communicated through appropriate channels.
Operator and privacy contact
- Operator
- ShapeeCloud JSC
- Privacy email
- smartexpensee@gmail.com
- Contact address
- 78 Hói Kiểng 6, Ngũ Hành Sơn, Đà Nẵng 550000, Việt Nam
Use the privacy contact above to request access, correction, export or deletion of your information, or to report a privacy issue. Provide the sign-in email and describe your request. Never send passwords, verification codes or full payment card details. We may ask for proportionate proof of account ownership before acting.