At Cashly AI, we are committed to protecting your privacy and ensuring the security of your personal financial information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our personal finance tracking and budgeting application.

---

1. Information We Collect

We collect the following types of information to provide and improve our services:

2. What We Do NOT Collect

3. No Bank Account Access

Cashly AI does NOT connect to bank accounts, credit cards, or any financial institutions. All financial data you see in the app is manually entered by you. We do not perform real-world financial transactions, access your banking credentials, or handle any sensitive financial information beyond what you choose to input.

4. How We Use Your Information

We use your information solely to provide and improve our services:

• Service Delivery – To display your financial data, generate reports, calculate analytics, and provide AI-powered financial insights
• Account Management – To authenticate your login, verify your email, and manage your account settings
• Subscription Management – To verify and manage your Pro subscription, enable premium features, and process subscription renewals
• Notifications – To send you budget alerts, financial summaries, and important account updates (you can opt out anytime)
• AI Features – To provide personalized financial advice, analyze your spending patterns, and generate insights based on your data
• App Improvement – To fix bugs, improve performance, and develop new features
• Security – To detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance – To comply with applicable laws and regulations

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information to third parties.

We only share data with trusted service providers necessary to operate our app:

• Google OAuth – For secure "Sign in with Google" authentication
• Cashly AI – For AI-powered financial analysis and chat features
• Google Play Billing – For processing subscription payments
• Email Service Providers – For sending OTP codes, password reset links, and notifications
• Analytics Services – Anonymous usage analytics to improve app performance

6. Data Security & Storage

We implement industry-standard security measures to protect your data:

• Encryption – All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure Authentication – Passwords are hashed using bcrypt; we never store plain-text passwords
• JWT Tokens – Secure token-based authentication for API access
• Database Security – Your data is stored in secure, encrypted databases with restricted access
• Regular Security Audits – We regularly review and update our security practices
• Access Controls – Only authorized personnel can access user data, and only for support purposes

7. Pro Subscription & Premium Features

Pro subscribers enjoy enhanced features:

• Unlimited AI Messages, Unlimited Image Analysis
• Export Reports (PDF/CSV), Ad-Free Experience

Subscription payments are processed securely through Google Play Billing. We store only subscription verification tokens, not payment details. You can cancel your subscription anytime through Google Play Store settings.

8. Notifications & Communications

We may send you:

• Account emails (OTP codes, password reset links, email verification)
• Budget alerts (opt-in)
• Financial summaries (opt-in)
• App updates (important feature updates and security notices)

You can manage notification preferences in your account settings. You can opt out of marketing communications at any time, but we may still send essential account-related messages.

9. Your Rights & Data Control

You have full control over your data:

• Access – View all your data through the app or by requesting an export
• Edit – Update or correct your information anytime in account settings
• Export – Download your financial data as PDF or CSV (Pro feature)
• Delete – Delete individual entries or your entire account and all associated data
• Reset – Clear all financial data while keeping your account active
• Opt-Out – Disable notifications, analytics, or specific features

To exercise these rights, use the in-app features or contact us at support@cashlyapp.org. We will respond to your request within 30 days.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If you delete your account, we will permanently delete all your personal and financial data within 30 days, except where we are required to retain it for legal or regulatory purposes. Deleted data cannot be recovered.

11. International Data Transfers

Your data may be stored and processed in servers located outside your country of residence. We ensure that all data transfers comply with applicable data protection laws, including GDPR and CCPA. By using our app, you consent to the transfer of your data to our secure servers.

12. Children's Privacy

Cashly AI is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information immediately. If you believe we have collected information from a child under 13, please contact us at support@cashlyapp.org.

13. Cookies & Tracking Technologies

We use essential cookies and session tokens to maintain your login state and provide core functionality. We do not use tracking cookies for advertising purposes. You can control cookie preferences through your browser settings, though disabling cookies may affect app functionality.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or in-app notification. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the app after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

---