Privacy Policy

Last updated: February 19, 2026

This Privacy Policy explains how thecash.ai ("we", "us", "our") collects, uses, shares, and protects your ("you", "your") information when you visit and interact with our website, software, applications, and any related services (collectively, "Services"). By using our Services, you agree to the processing of your information in accordance with this Privacy Policy.

1. Information We Collect

We collect certain information to provide and improve our financial management Services. The exact data we collect depends on how you use the Services (for example, whether you create an account, use paid features, or contact support).

1.1. Account and Contact Information

When you create an account, sign in, subscribe, or contact us, we may collect personal information such as your email address and an account identifier (for example, a user ID). If you provide additional details (such as a display name), we may store that as well.

1.2. Financial Data You Provide

We collect the financial information you choose to input into the Services, such as transactions, categories, notes, and other records used for tracking and reporting. This data is provided by you and is used to deliver the core functionality of the app.

1.3. Purchases and Subscription Information

If you purchase a subscription or other paid features, the payment is processed by Apple (for purchases made through Apple In-App Purchase). We do not receive or store your full payment card details. However, we may receive and store purchase and subscription information such as subscription status, product identifiers, transaction identifiers, and purchase history needed to:

• enable paid features,
• validate entitlement/access,
• provide customer support related to subscriptions, and
• prevent fraud and handle billing issues.

We may use a third-party subscription management provider (for example, RevenueCat) to help manage and validate subscriptions.

1.4. Crash Reports and Diagnostic Data

We may collect crash reports and diagnostic data to improve app stability, performance, and reliability. This can include:

• crash reports (for example, provided by the operating system or platform tooling),
• technical diagnostics such as app version, device model, operating system version, and timestamps,
• and diagnostic logs that you choose to send to us (user-initiated) for troubleshooting.

Diagnostic data may include an account identifier (such as a user ID) and, in some cases, may be associated with your email address if needed to resolve a support request.

1.5. Usage and Technical Information

We may collect technical and usage information such as your IP address, browser type, device information, operating system, approximate location derived from IP address, and information about how you use the Services (for example, screens/features used and frequency of use). This helps us operate the Services, diagnose issues, and improve the user experience.

1.6. Communications and Support

If you contact us (for example, by email), we will receive the content of your message and any information you choose to provide. If you attach logs or other files, we will process those to support you and troubleshoot issues.

2. Legal Basis for Processing

We process personal information based on the following legal grounds:

• To fulfill our contractual obligations in providing the Services.
• With your consent, which you can withdraw at any time where applicable.
• For our legitimate interests, such as maintaining, securing, and improving the Services, provided these are not overridden by your fundamental rights.
• To comply with legal obligations where applicable.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Authenticate users and secure accounts.
• Enable subscriptions and paid features, and manage entitlements.
• Respond to your questions and support requests.
• Analyze and develop new features, including AI-driven analytics and reporting.
• Detect, prevent, and address technical issues, crashes, and security incidents.
• Send you technical notices, updates, and security alerts.
• Provide marketing communications only where permitted and, where required, with your consent.

3.1. AI / Report Generation

Some features may use automated processing to generate insights, summaries, or reports based on the data you provide (for example, transactions and categories). This processing is used to provide the feature output you requested and to improve quality and reliability. If third-party service providers are used to power these features, they are required to protect your data and process it only for providing their services to us.

4. Sharing of Information

We do not sell your personal information. We may share certain information with trusted third-party service providers who assist us in delivering and maintaining the Services. These third parties are contractually obligated to protect your data and use it only to provide services to us.

Examples of service providers we may use include:

• Authentication providers (to help you sign in and manage accounts).
• Subscription management providers (for example, RevenueCat) to validate and manage subscription entitlements.
• Platform providers (for example, Apple) to process in-app purchases and provide platform services such as receipt validation and platform diagnostics.
• Infrastructure and hosting providers to run the Services.
• Support tooling used to respond to your requests.

We may also share information if required by law, to enforce our agreements, or to protect the rights, property, or safety of users, the public, or our Services.

5. Protection of Information

We employ industry-standard technical and organizational measures to safeguard your data against unauthorized access, accidental loss, destruction, or alteration. However, no method of transmission or storage is 100% secure.

6. Data Retention

We retain personal information only for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, and comply with legal obligations. For example:

• Account and financial data is generally retained while your account is active, and may be retained for a limited period after deletion where necessary for legal, security, or backup purposes.
• Crash reports and diagnostic logs are retained only as long as needed for troubleshooting and improving reliability (typically up to 12 months), unless a longer retention is required for legal or security reasons.
• Purchase and subscription records may be retained as necessary to provide entitlements, handle billing-related support, and comply with accounting or legal requirements.

7. Your Rights

Depending on where you live, you may have certain rights in relation to your information such as:

• The right to access your data.
• The right to correct inaccurate data.
• The right to erase your data.
• The right to restrict processing of your data.
• The right to data portability.
• The right to object to processing of your data.
• The right to withdraw consent at any time (if processing is based on consent).

To exercise these rights, please reach out to us at support@thecash.ai. We may need to verify your identity before processing your request to ensure the security of your personal data.

8. Data Breach Notification

In the event of a data breach, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware of the breach, where feasible, in accordance with applicable law.

9. Data Protection Officer

If applicable, our Data Protection Officer can be contacted at: support@thecash.ai.

10. Cookies and Tracking Technologies

We use cookies and similar technologies on our website to operate the Services and store certain preferences. Cookies are small data files that may include an anonymous unique identifier. You can instruct your browser to refuse cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

We use cookies for the following purposes:

• To provide and maintain the Services.
• To understand and analyze how you use the website portion of the Services.
• To improve and customize the Services to your preferences.
• To help protect against abuse and keep the Services secure.

11. Children's Privacy

Our Services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Privacy Policy

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, may provide additional notice (such as adding a statement to our homepage or sending you an email notification).

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@thecash.ai.

By using our Services, you acknowledge that you have read, understood, and agree to the processing of your information as described in this Privacy Policy.