Effective: 5 June 2026 · Last updated: 5 June 2026
This Privacy Policy explains how CashFlow IQ ("we", "our", "the app") collects, uses, stores and protects your personal information when you use our mobile application available on Google Play. By using CashFlow IQ you agree to the practices described below.
1. Information We Collect
1.1 Information you provide
Google Account Information — when you sign in with Google, we receive your basic profile (email, name, profile-picture URL). Authentication is brokered by Emergent-managed Google OAuth on top of Google Identity Services.
Display name & country — used to personalise the dashboard and select your default currency.
Income details (optional) — annual salary and weekly working hours, used only to calculate your hourly worth and the "time cost" of expenses. Stored on our servers and visible only to you.
Transactions, budgets, subscription detections — every entry you create or accept in the app.
1.2 Information collected automatically
SMS transaction messages (Android, opt-in) — when you grant SMS permission, the app reads financial-looking SMS from your inbox locally on your device, extracts amount, merchant and category, and creates a draft in your inbox. Drafts remain until you accept, ignore, or delete them. The original SMS text is stored alongside the draft only so you can verify and undo entries; deleting a draft removes the snippet immediately. No SMS content is sent to advertisers or third parties.
Device push token (opt-in) — used to deliver budget alerts and weekly summaries via Firebase Cloud Messaging / Apple APNs.
Advertising identifier — Google AdMob may read your device's advertising ID to show non-personalised ads. You can reset or disable this from your device's Google Settings → Ads.
App version & platform — anonymous, used for diagnostics.
1.3 What we do NOT collect
We do not access your contacts, photos, microphone, or location.
We do not sell, rent, or share your personal financial data with advertisers.
We do not use third-party analytics SDKs that track behavior across apps.
2. How We Use Your Information
To authenticate and securely verify your identity via Google Sign-In.
To display your spending, budgets, and SMS-parsed analytics inside the app.
To compute time-cost equivalents from your income.
To convert between currencies using public exchange-rate data.
To send optional push notifications you have enabled (budget alerts, weekly summary).
To serve non-personalised ads in the free tier (Pro users see no ads).
3. Third-Party Services
3.1 Google Sign-In
We rely on Google Identity Services (via Emergent-managed OAuth) to authenticate users. Authentication data is processed by Google in accordance with the Google Privacy Policy.
3.2 Google AdMob (advertising)
The free tier shows banner and interstitial ads via Google AdMob. AdMob may collect the advertising ID and limited request metadata to serve ads. We request non-personalised ads only. Pro subscribers see no ads. See Google AdMob Privacy & Terms.
3.3 Open Exchange Rates
We periodically fetch USD-base exchange rates from the free public endpoint open.er-api.com. No personal data is sent.
3.4 Push Notifications
If you enable notifications, your device push token is sent to our notification relay so we can deliver alerts via Apple APNs / Firebase Cloud Messaging. No notification content is shared with any third party beyond what is necessary for delivery.
4. Data Storage & Security
All app data is stored on secured cloud servers and transmitted over HTTPS / TLS.
We never store passwords — authentication is fully managed via Google tokens.
Service-account keys and credentials are restricted to authorised personnel.
Session tokens expire after 7 days of inactivity and are automatically purged.
5. Your Rights
5.1 Account Deletion
You can permanently delete your account and all associated data at any time from Settings → Account → Delete account inside the app. Once deleted, your data cannot be recovered. See the Account Deletion Policy below for details on what is removed and what may be retained.
5.2 Data Access & Export
You can request a copy of your data by emailing us at bksingh7003750876@gmail.com. We will respond within 30 days.
5.3 Notification & Permission Controls
Toggle notification types in Settings → Notifications. Revoke SMS access from Settings → SMS detection or your device's system settings. Reset your advertising ID from your device's Google Settings → Ads.
6. Children's Privacy
CashFlow IQ is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we learn we have collected such data, we will delete it promptly.
7. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Significant changes will be highlighted inside the app.
8. Contact Us
For privacy questions or data requests, please contact us:
You can delete your CashFlow IQ account at any time from Settings → Account → Delete account inside the app. When you do, the following applies.
9.1 What we permanently delete
Profile information (name, email, country, currency, income, working hours).
All transactions you have logged, manually or via SMS detection.
All budgets and category limits you have configured.
Goals, saved preferences, and in-app settings.
Subscription detection preferences and dismissals.
All active login sessions on every device you are signed in to.
Cached data stored locally on this device (sign-in token, recent transactions cache, exchange-rate cache).
Deletion happens immediately upon confirmation. After deletion, your data cannot be restored.
9.2 What may be retained
Certain limited information may be kept after deletion when required by law or to protect our service from abuse. This data is stored separately from your active account and is never used for personalization, marketing, or analytics.
Legal & compliance — Records we are required to retain under applicable tax, financial, anti-fraud, anti-money-laundering, or consumer-protection laws. Examples include billing records or evidence of past in-app purchases.
Security & fraud prevention — Anonymized logs, abuse signals, IP / device hashes used to detect spam, automated abuse, and bypass attempts. These do not contain your personal financial data.
Aggregated analytics — Statistical metrics that cannot be linked back to you (e.g. monthly active user counts, anonymized usage trends).
Backups — Encrypted backups created before the deletion request expire automatically within 30 days. They are not accessible by application services and are not used to restore the deleted account.
9.3 Your rights
You can request deletion at any time from inside the app.
You can also request deletion or a copy of your data by emailing our support team at bksingh7003750876@gmail.com.
You can sign up again later with the same Google account — a brand new, empty account will be created.