Privacy Policy

The short version

Your financial data is encrypted on your device before it is synchronized. Our servers store encrypted ciphertext, so Cache cannot read your balances, transactions, budgets, or other encrypted financial records.

Some information is not part of that encrypted ledger, such as your account email, waitlist answers, payment information, and information you actively send to optional AI or receipt-processing features. We use that information only to run and improve Cache, communicate with you, and meet our legal obligations.

Information we collect

Account and access information includes your email address, password authentication details, and, if you choose Apple or Google sign-in, the identity information those providers share with us. We also process session and device information needed to keep your account secure.

Waitlist information may include your email address, country, how you currently track money, devices you use, language, and whether you are willing to provide feedback.

Your encrypted financial records may include accounts, transactions, budgets, debts, funds, taxes, inventory, profiles, attachments, and other information you choose to enter. We store the encrypted form required to synchronize your data across your devices.

If you enable notifications, we store your push subscription endpoint and related technical keys. If you subscribe, our payment providers process payment and subscription information; Cache receives the status and identifiers needed to manage your plan.

Optional AI and receipt scanning

The assistant and receipt-scanning features send only the content you choose to submit for server-side processing. That can include a chat message, relevant financial context, or receipt image and text. These features use OpenAI and AI infrastructure providers to produce a response or structure a receipt.

Do not submit information through these features unless you want it processed for that request. AI-generated results can be inaccurate and should be reviewed before you rely on them.

How we use information

We use information to provide account access, encrypt and synchronize the Service, respond to your requests, process subscriptions, send necessary service communications, protect against misuse and fraud, improve Cache, and comply with law.

We do not sell your personal information, broker your data, or use your financial data for advertising. Cache does not connect to your bank or collect bank credentials.

Who processes information

We use service providers that help us operate Cache: Supabase for authentication and encrypted data storage, Vercel for hosting, Apple and Google for optional sign-in, Resend for service email, OpenAI and AI infrastructure for optional AI and receipt features, and Paddle, RevenueCat, and app stores for subscriptions.

These providers process information under their own terms and privacy practices and only as needed for the services they provide. We may also disclose information where required by law, to protect Cache and its users, or as part of a business transfer.

Marketing website storage

The Cache marketing website stores your theme preference in your browser’s local storage. It does not currently use third-party analytics scripts or advertising cookies. Our hosting providers may still receive standard technical request information, such as IP address and browser data, to deliver and protect the website.

Retention, export, and deletion

We keep information for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. You can export your data from Cache. When you delete your account, we delete your account data as described in the Service, subject to limited retention required for legal, security, fraud-prevention, billing, or operational reasons.

Security

Cache uses encryption designed to protect your financial records before they leave your device, along with access controls and other safeguards. No method of transmission or storage is completely secure, so please protect your device, account credentials, and passcode.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, object to, restrict, or receive a copy of your personal information. You may also withdraw consent where processing relies on consent. Contact us to make a request; we may need to verify your identity first.

Changes to this policy

We may update this policy as Cache changes. If an update is material, we will provide reasonable notice through the Service or by email. The updated policy will show its new effective date.