Privacy Policy

Cashrou is operated by XCAVAR LLC, Miami, Florida, United States. Privacy questions may be sent to hello@cashrou.com.

Cashrou keeps the information below on our servers so that one plan is available on your iPhone, your iPad and the web app, and so it survives losing a device. It is stored in a Postgres database operated for us by Supabase, and it is used to run Cashrou. We do not sell any of it. None of your financial records, meaning accounts, balances, income, bills, debts and goals, is ever used for advertising or shared with anybody for it. Your name and email are the single exception, and only so that the advertising we pay for can be measured; section 10 sets out exactly what that means.

Cashrou uses the information above to work out what is left in a payday, how long a debt will take to clear, what your goals and net worth are, and which bills fall in which pay period. Those calculations run on your device. Our servers store your records and pass them between your devices; they do not work your figures out. Access is restricted to your own account: every record is tied to your user id and the database refuses reads and writes for anybody else.

Your financial records are transmitted to us, because that is what keeps the iPhone app, the iPad app and the web app showing the same plan. They travel over an encrypted connection and are stored encrypted at rest.

There are things we never receive:

If you contact support by email, you may choose to provide contact details, screenshots, diagnostic information or other content. Support communications are processed only to respond to your request and maintain service records.

Cashrou does not connect to banks, does not store bank credentials and does not use Plaid or any similar service. Nothing is ever imported from your accounts. The transactions Cashrou holds are the ones you record yourself, which is why it can plan what is coming rather than only report what went.

We use a small number of service providers to operate the app. They process information only on our instructions and may not use it for their own purposes:

TikTok and Meta are not on that list and are set out separately below. They receive information so that advertising can be measured, and they use what they receive under their own privacy policies rather than only on our instructions.

We may also disclose information where legally required, or to protect our rights or the safety of others.

Cashrou includes an assistant you can ask about your own money. When you send it a question, your app builds a short summary of where you currently stand, such as account balances, bills, paydays, goals and debts, and sends that with your question to Anthropic, which provides the model that writes the answer. Anthropic processes it to produce the answer and does not use it to train its models. The summary is assembled on your device each time you ask, and neither your question nor the answer is stored on our servers.

The assistant cannot change anything by itself. It can only propose a change, such as ticking a bill as paid or creating a goal, and nothing happens until you confirm it.

Cashrou can add a subscription, a charge or an account by reading a picture rather than making you type it: a receipt, a notification from Wallet, or a screen from your bank.

The picture never leaves your device. Your iPhone reads the text off it on the phone, using the text recognition built into the operating system, and only that text is sent anywhere. Anything shaped like a full account number is stripped out of it before it goes.

That text is sent to Anthropic, the same company behind the assistant, which picks out a name, an amount and a date and sends them back. Nothing is written into your money until you confirm it on a screen that shows you what was read.

Both are off until you turn them on, and reading a screen from your bank is asked for separately from reading a receipt, because that one carries your balances.

Cashrou offers an optional browser extension that captures a subscription from the page you are looking at, so you do not have to type it in later. It is not part of the app and nothing depends on it. If you never install it, nothing in this section applies to you.

It reads a page only when you click the Cashrou icon in your browser toolbar. There is no background process, nothing watches what you browse, and no page is read because you happened to visit it. One click reads one page: the one in the tab you clicked on.

What it reads is the text that is visible on that page, up to twelve thousand characters. That text is sent to Cashrou, and from there to Anthropic, which provides the model that reads it and picks out the subscription. Anthropic processes it to produce that answer and does not use it to train its models, the same arrangement described above.

What comes back is stored against your account as a pending row: the name of the subscription, what it costs, the currency, how often it charges, the first charge date if the page gave one, and a short note of anything else worth keeping, such as which plan it is. The text of the page is not stored. It is held only for as long as the request takes to answer, at Cashrou and at Anthropic, and is then gone. We do not log it and we do not keep a copy.

Nothing captured this way is added to your money until you approve it. It arrives in a list called Waiting for you, where you can correct it or discard it. Discarding it removes the row.

The extension has no sign-in of its own. It copies the session you already have in the Cashrou web app, from app.cashrou.com, and keeps it in your browser extension storage so it can send the capture to your own account. It never sees your password, never creates a session and never refreshes one. Signing out of the web app ends the extension access, and removing the extension deletes the stored session with it.

Two things follow from reading a page you chose, and both are worth saying plainly. The first is that the extension cannot know in advance what is on the page, so if you click it on a page showing something personal, that text goes with everything else on the page. Click it on receipts and billing pages, which is what it is for. The second is that we do not want that text either, which is why none of it is kept.

The extension does not read your browsing history, your open tabs, your cookies, your saved form entries, or any page other than the one you clicked on. It does not read your bank, and it has no connection to any bank.

Reading a page in this way uses the same allowance as the assistant and is part of a paid Cashrou plan. Without one, the extension will tell you so and read nothing.

Two forms on the website collect something before you have an account, and neither of them touches your financial records.

Both also store a salted, one-way hash of your network address, which we use to stop the same machine submitting a form hundreds of times. It cannot be reversed into an address. Ask us at any time to delete either, and we will.

The website at cashrou.com uses Google Analytics, loaded through Google Tag Manager, to count visits and see which pages are read. It sets cookies in your browser and tells us things like which page you arrived on and roughly where in the world you are. It is about the website, not about you: it has no way to see anything inside Cashrou, because the app is a different site behind a sign-in.

The apps record which steps of the initial setup you reach, so we can see where people get stuck. Those events carry a step name and a count and never a figure: nothing you enter into Cashrou, no balance, bill or goal, is measured or sent anywhere for measurement. The iPhone and iPad app also carries advertising measurement from TikTok and Meta, which the next section sets out in full. There is no session recording anywhere.

Browsers offer a Do Not Track setting and most ad blockers stop this kind of measurement entirely. Neither affects your ability to use Cashrou.

Four kinds, and only the last one is a list you join.

Nothing else. There is no newsletter to your account address, nothing sold or passed to anybody else to send, and no list you are added to for having paid us.

Every one of them except the sign-in link carries an unsubscribe link, and each link stops only its own kind: leaving the product news does not switch off a payday reminder you asked for, and leaving the getting started sequence does not either. Product news can also be switched off in Settings, on the phone and on the web, next to where you turned it on.

Cashrou advertises on TikTok and on Meta, which is Facebook and Instagram. The iPhone and iPad app carries their measurement kits, so we can tell which advertising brings people to Cashrou and stop paying for the advertising that does not. In the apps this is the only place anything is handed to a company with purposes of its own, so it is worth being exact about it.

Your name and email address are hashed on your phone before they leave it. Hashing is one-way: what arrives can be matched against an address TikTok or Meta already hold, and cannot be turned back into your address by them or by anybody who intercepts it.

iOS asks your permission before an app may use the advertising identifier that follows you across other apps and websites. Refusing costs that identifier and nothing else: the events above still report that somebody subscribed, because that is what the advertising is billed on, and Apple’s own SKAdNetwork attributes conversions without needing any permission at all. You can change your answer at any time under Settings, Privacy & Security, Tracking.

TikTok and Meta are advertising companies rather than service providers acting on our instructions, so what they may do with what they receive is set by their privacy policies and limited in their settings rather than ours.

The web app at app.cashrou.com carries none of this. There is no advertising measurement on app.cashrou.com and no session recording anywhere.

An invite code links the account that used it to the account it came from, because that link is what decides who gets a free month and when. We keep the code, that link, and whether it went on to a paid subscription. Neither person is shown the other: the one who invited you sees a count, not a name, and you see the code you typed and nothing about them.

If you are a partner in our programme we also keep your name, the address we reach you at, a reference to wherever you are paid, your rate and what you have earned. Your statement counts the people who subscribed and cannot name them. The earnings records hold no reference to any customer account, only a one way scramble of it: enough to tell one customer's payments from another's, and not enough to name either.

Cashrou also keeps a copy of your records on each device you use it on, so the app works when you are offline. Your operating system may include that copy in device backups, depending on your settings. Those backups are controlled by Apple on iPhone and iPad, by Google on Android, and by your own device settings, not by us.

Your records stay in your account until you change them or delete them. Delete your account and they go with it. The copy held on a device stays there until you erase it in Cashrou, delete the app, or reset the device.

You can erase your financial data from inside Cashrou. Deleting the app removes the copy held on that device but does not delete your account, because the account is what the other devices sign in to.

To delete the account itself, including your name, your email address and every financial record attached to it, open Settings in Cashrou and tap Delete account and data. It happens while you wait and it cannot be undone. If you cannot sign in, email hello@cashrou.com from the address you signed up with and we will remove it within 30 days. Deleting the account deletes the records: they are attached to it and go when it goes.

Two things are deliberately kept, and both are one way scrambles of your email address rather than the address itself. One stops a closed and reopened account claiming a second free week, the other stops it claiming a second free month from an invite. Neither can be turned back into your address, neither is used for anything else, and nothing else about you is kept with them.

Depending on where you live, you may have additional rights over your personal information, including access, correction, deletion and portability. Contact us and we will honour them.

Your records travel over an encrypted connection and are stored encrypted at rest. Access is enforced per account in the database itself rather than only in the app, so a request for somebody else’s records is refused by the database. Signing in uses an emailed link or Sign in with Apple, so there is no Cashrou password to be guessed or reused. No system can guarantee absolute security, and protecting the devices and the email account you sign in with remains important.

Cashrou is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

We operate in the United States and your information is processed there, where privacy laws differ from those in other countries. Cashrou may be used from other countries, and using it means you understand that processing happens in the United States.

We will update this policy when what Cashrou does changes, and before introducing anything material that it does not do today, such as bank connectivity. The date at the top of this page is when it last changed.

XCAVAR LLC, Miami, Florida, United States. hello@cashrou.com