Privacy Policy

Last updated: January 9, 2025

The Short Version

  • Your financial data is yours. We use it only to show you your cash flow.
  • We never sell your data. Ever.
  • We can't access your bank login. Plaid handles that securely.
  • You can delete everything anytime from Settings.

Who We Are

CshFlow is a personal finance tool built to help you understand your cash flow. We're based in Canada and committed to protecting your privacy.

What We Collect

Information You Give Us

  • Account info: Email, name (optional), password
  • Payment info: Handled by Stripe — we never see your card number
  • Preferences: Your settings and how you categorize transactions

Information From Your Bank (via Plaid)

  • Account details: Account names, types, and balances
  • Transactions: Date, amount, merchant name, category
  • What we DON'T get: Your bank login credentials — Plaid keeps those secure

Information We Collect Automatically

  • Usage data: Which features you use, when you log in
  • Device info: Browser type, device type (for making CshFlow work properly)
  • Error logs: If something breaks, we log it to fix it

How We Use Your Data

We use your data to:

  • Show you your finances: Display balances, transactions, and projections
  • Provide insights: Calculate spending patterns and safe-to-spend amounts
  • Run the service: Process payments, send important emails, fix bugs
  • Improve CshFlow: Understand how people use the app to make it better

We don't use your data for: Advertising, selling to third parties, or anything unrelated to providing CshFlow.

Who We Share Data With

We share data only with services that help us run CshFlow:

Plaid

Connects to your bank accounts securely

Plaid Privacy Policy →

Stripe

Processes subscription payments

Stripe Privacy Policy →

Vercel

Hosts the CshFlow website

Vercel Privacy Policy →

Discord (optional)

If you connect Discord, we share your user ID to manage community roles

Discord Privacy Policy →

We may also share data if required by law (like a court order), but we'll try to notify you first.

How We Protect Your Data

  • Encryption: All data is encrypted in transit (HTTPS) and at rest
  • Secure infrastructure: We use industry-standard cloud providers
  • Limited access: Only essential team members can access user data
  • No plain-text passwords: Your password is hashed, never stored as text

Your Rights and Choices

You Can Always:

  • Access your data: See everything we have in your account
  • Export your data: Download your transactions anytime
  • Delete your data: Remove your account and all data from Settings
  • Disconnect banks: Unlink any connected account
  • Update your info: Change your email or preferences

Email Communications

We'll send you important emails about your account (like payment receipts). We don't send marketing spam. If we ever do send optional updates, you can unsubscribe.

Data Retention

  • While you're a user: We keep your data to provide the service
  • After you delete your account: We delete your data within 30 days
  • Some exceptions: We may keep anonymized analytics or data required by law

Cookies

We use cookies to:

  • Keep you logged in
  • Remember your preferences
  • Understand how people use CshFlow (analytics)

We don't use cookies to track you across the internet or serve ads.

Children's Privacy

CshFlow is for adults (18+). We don't knowingly collect data from children. If you believe a child has created an account, please contact us.

International Users

CshFlow is based in Canada. If you're using CshFlow from another country, your data may be transferred to and processed in Canada. By using CshFlow, you consent to this transfer.

Changes to This Policy

We may update this policy occasionally. If we make significant changes, we'll notify you by email or in the app. The "Last updated" date at the top shows when we last made changes.

Contact Us

Questions about privacy? We're here to help: