Privacy Policy

Cash++ works without an account. The content of your financial entries (accounts, transactions, budgets, savings, notes, and photos) stays on your device, and we do not receive it.

The app does send some limited information to Google services and to one logo service: usage analytics (you can turn this off in Settings), crash reports (this cannot be turned off in the app), data that Google AdMob uses to show ads, and merchant names when you ask for logo suggestions. What the app sends explains each one.

Cash++ (the "app") is published by martomz studio ("we", "us"). The app's package name is com.martomz.cashwise.

This policy covers the Cash++ Android app and this website. You can reach us at martomsstudios@gmail.com.

You decide what to enter. Depending on how you use the app, it stores on your device:

• Accounts, balances, credit limits, and exchange rates you set
• Transactions, recurring transactions, budgets, and savings goals
• Categories, merchants, and merchant images
• Receipt photos you take or attach
• App settings and preferences, such as your display currency

This data is created and kept by the app on your device. We do not receive a copy, and we do not add it to analytics events, crash reports, or ad requests.

The app has no sign-up, so we do not ask for your name, email address, or phone number. It does send the following limited information, using random identifiers (such as an app installation ID or your Android advertising ID) instead of your name. We use it to understand and improve the app, and we do not use it to identify you.

Usage analytics (Google Analytics for Firebase)

• Which screens and features you use, how often, and for how long
• Basic device and app information, such as device model, operating system version, app version, language, and approximate location worked out from your IP address

The usage events we record describe which features are used. They do not include amounts, account or merchant names, notes, or other content of your financial entries. Analytics is on by default, and you can turn it off in Settings. See Your choices.

Crash reports (Firebase Crashlytics)

If the app crashes, it sends a crash report with technical details of what went wrong and basic device and app information, linked to a random installation ID. We do not add the content of your financial entries to crash reports. We use crash reports to find and fix problems, so they cannot be turned off in the app.

Ads (Google AdMob)

The app shows ads provided by Google AdMob. To do this, AdMob may collect your device's advertising ID, IP address, device and app information, and how you interact with ads. Google may use this to show ads, including personalised ads, to limit how often you see the same ad, to measure ads, and to prevent fraud. We do not send the content of your financial entries to AdMob.

Merchant logo suggestions (Brandfetch)

When you ask for logo suggestions, the app sends the merchant name you typed to Brandfetch. See Third-party services.

We do not sell your personal information for money. Advertising services such as AdMob may use the information above to show ads, as described in Third-party services.

Android asks you to allow camera and photo access the first time you use those features. You can change these choices at any time in your device settings.

CAMERA

Take a photo of a receipt to attach to a transaction. The camera is used only when you choose to take a photo.

READ_MEDIA_IMAGES, READ_MEDIA_VISUAL_USER_SELECTED

Attach an existing photo from your gallery, and check that the receipt and merchant photos the app saved to your photo library are still there. On Android 14 and newer you can share only selected photos.

READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE (Android 12L and older only)

Save and read receipt and merchant photos in your photo library on older Android versions.

INTERNET

Look up merchant logos, send usage analytics and crash reports, and load ads.

com.google.android.gms.permission.AD_ID

Lets Google advertising and analytics services read your Android advertising ID (Android 13 and newer). You can delete or reset this ID in your device settings.

Google Firebase (Analytics and Crashlytics)

Usage analytics and crash reports are processed by Google through Firebase. Google's handling of this data is described in Privacy and Security in Firebase and in Google's Privacy Policy.

Google AdMob

AdMob serves the ads in the app. How Google uses data from apps that use its advertising services is explained in How Google uses information from sites or apps that use our services and Google's Advertising policy page.

Brandfetch (merchant logo suggestions)

When you add a merchant and ask for logo suggestions, the app requests logos from Brandfetch (cdn.brandfetch.io). This is what is sent:

• The merchant name you typed, reduced to letters and digits and tried with several common domain endings
• The app's Brandfetch client identifier
• The technical information every internet request includes, such as your IP address

You can add a merchant without using logo suggestions, and then nothing is sent to Brandfetch. Brandfetch handles requests under its own privacy policy.

Google Play services (fonts)

The app asks Google Play services to provide its text fonts (Inter and Urbanist). That request is made by Google Play services, not by the app, and contains no data from your transactions. Google's privacy policy applies to it.

Google Play

If you install the app from Google Play, Google handles the download and may provide us with aggregated statistics. If you have chosen to share diagnostics with Google, we may also see crash and performance reports in the Google Play Console.

• Usage analytics: turn it off in the app's Settings. When it is off, the app stops sending usage analytics.
• Crash reports: these cannot be turned off in the app. Uninstalling the app stops them.
• Ads: you can reset or delete your advertising ID, or turn off ad personalisation, in your device settings (usually under Google or Privacy, then Ads). Ads will still appear, but they will not be personalised to you.
• Camera and photos: allow or deny these in your device settings. The app asks only when you use a feature that needs them.
• Merchant logos: skip logo suggestions and nothing is sent to Brandfetch.

You can export a backup file and restore it later. You choose where the file is saved using Android's file picker. The file is not sent to us, and the app does not upload it anywhere.

• The backup is encrypted with AES-GCM.
• If you set a password, the encryption key is derived from it with PBKDF2 (HMAC-SHA256). We cannot recover a forgotten password, so a backup protected by a lost password cannot be restored.
• If you do not set a password, the file is encrypted with a key built into the app. That keeps the file from being casually read, but it is not a substitute for a password. Set a password if the file will be stored in a shared or cloud location.

Once a backup file is saved outside the app, it is under your control. If you put it in cloud storage or share it, that service's terms and privacy policy apply to it.

The app turns off Android's automatic app backup, so its data is not copied to your Google account by that feature.

• The app keeps your financial entries on your device until you delete them or remove the app.
• You can edit or delete entries in the app at any time. Deleting a transaction also removes its receipt photos from your photo library.
• Uninstalling the app or clearing its storage removes the app's data.
• Photos the app saved to your photo library (in the Pictures or DCIM folder, in a folder named Cashwise) are not removed when you uninstall. Delete them in your gallery if you no longer want them.
• Backup files you exported stay where you saved them until you delete them.
• Analytics and crash data already sent to Google is kept by Google for the period set in our Firebase project settings. Uninstalling the app does not delete data that was already sent.

The app's data is kept in the app's private storage on your device, protected by Android's app sandbox. Its protection also depends on your device: use a screen lock and keep your device encrypted and up to date.

Receipt and merchant photos are saved to your photo library, where other apps that you allow to access your photos can see them. No method of storing or transmitting data is completely safe, and we cannot guarantee absolute protection.

Cash++ is a general-audience personal finance tool and is not directed at children. We do not knowingly collect personal data from children.

Depending on where you live, laws such as the GDPR or the CCPA may give you rights to access, correct, delete, or export personal data a company holds about you, and to object to or limit certain uses of it, including for advertising.

We hold none of your financial entries, so there is nothing for us to access, correct, or delete there. The analytics, crash, and ad data described above is tied to random identifiers and not to your name or contact details, so we usually cannot tell which data is yours. You can limit it with the controls in Your choices. If you have a question or request about your data, contact us and we will respond.

This website sets no cookies and uses no analytics, advertising, or third-party scripts, fonts, or embeds. The analytics and ads described above run only in the app. Our web host may keep routine server logs, such as IP address and requested page, to run and protect the site. We do not use them to identify visitors.

We may update this policy. The date at the top shows when it last changed. If we add any feature that collects or shares data, we will update this policy before that feature is released.

Questions or requests about this policy: martomsstudios@gmail.com (martomz studio).