Privacy Policy

Who processes your data

What we process

Account data. The e-mail address you sign in with. If you use Sign in with Apple or Google, we receive an identifier and an e-mail address from them — with Apple this may be a relay address if you chose to hide your e-mail. The provider may also supply your display name.

Content you create. Expenses, categories, currencies and budgets. In local mode, they stay on your device. We store signed-in profile content on our servers to synchronize and share it according to your settings.

Receipt photos and PDF documents. Only if you attach them. Profile names, ownership and membership determine who can access shared content.

We collect no location data, no contacts, no browsing history and no advertising identifiers. We do not combine you with profiles from other services.

Why we process it

Payments for optional storage. When you buy Cashnote Plus on the web, we share your account identifier with Stripe to link the subscription. You enter contact, billing and card details on Stripe's checkout page. Cashnote stores the Stripe customer identifier and subscription status to determine your storage limit; it does not store your full card number or CVC.

To provide the service you signed up for: synchronisation between your devices and, optionally, sharing a budget with people you invite yourself. The legal basis is performance of a contract under Article 6(1)(b) GDPR.

The app works without an internet connection

Sign in to synchronize profiles. Cached profiles work offline: you can record expenses without a connection and synchronize them when the network is available again. Local-only profiles stay on that device and are not automatically transferred when you sign in. Cloud attachments need to be downloaded before they are available offline.

Where the data is stored

Live app data is stored on Supabase servers in Ireland, within the European Union. We keep encrypted backup copies of receipts and profile photos in DigitalOcean Spaces in Frankfurt, Germany. The decryption key is stored separately from that storage service.

How long we keep it

For as long as needed to operate your account and shared profiles. Deleted records are marked as deleted so the deletion can reach other devices. Removing a record from the app does not immediately remove its retained server copy. After synchronization, receipt files that are no longer used by a live expense are scheduled for deletion after a short grace period. Incomplete uploads are kept for at least 24 hours before cleanup. Processing may take longer if the service is unavailable. Storage space is released when files are deleted.

File backups are regularly reconciled with live storage. After a file is removed or replaced, its previous backup version is kept for another 30 days from reconciliation, then removed by the storage lifecycle rule. Reconciliation can take longer during an outage.

Account deletion is processed in the background. It removes your account and profiles you still own, including their stored attachments. Before deletion you can transfer an owned profile to another member. Expenses in profiles owned by other people remain available to their members without your author identifier; content you entered in descriptions or attachments remains part of those shared records. Contact us if that content contains personal information you want removed.

For subscription withdrawals we retain the email address, subscription identifier, statement, receipt time and processing record. Account deletion does not automatically erase these records, so that we can complete the withdrawal and meet related legal obligations. Further retention is reviewed against these purposes.

Who we share it with

Nobody for our marketing. We use these service providers:

• Resend — sending emails, including subscription withdrawal confirmations; processes recipient addresses and message content.
• Google Workspace — receiving and handling customer correspondence; processes email addresses and message content.
• Supabase — database, authentication and file storage, EU
• DigitalOcean — encrypted backup copies of receipts and profile photos, Germany
• GitHub Actions — running the automated encrypted file copy
• Stripe — payments, invoicing and subscription management for web purchases. Depending on the activity, Stripe acts as a processor or an independent controller. Its processing, retention and international transfers of payment data are described in the Stripe Privacy Policy. Deleting your Cashnote account does not erase payment records that must be retained for accounting and legal obligations.
• Apple and Google — only if you choose to sign in with them

Operator access for support

For support and abuse handling, the operator can access an account's e-mail address, subscription status, storage usage, and its profile names and membership. Expense contents — amounts, descriptions — and receipt files are not accessible this way. Every operator intervention on an account is recorded in an audit log. These audit records are kept indefinitely and survive account erasure, retaining the account identifier but no contact details, since nobody — including the operator — has permission to delete them.

We also keep an operational event log of account activity — profile creation, deletion and transfer, membership changes, the invitation lifecycle (created, accepted, revoked), receipts added and removed along with their size, and subscription changes. It contains no expense contents and no file names. Events are kept for 90 days and are removed when the account that owns them is erased; an event recorded for something you did in someone else's profile stays there, and may retain your account identifier in its details until that 90-day period elapses.

Your rights

You have the right to access, rectification, erasure, restriction of processing, portability and objection. Exercise them at info@jarwizz.com; we reply within one month.

Two of them are in the app itself, with no need to ask us:

• Portability — Settings exports the selected profile as JSON or CSV. Export attachment files separately.
• Erasure — Your account settings let you request account deletion and transfer owned profiles first, as described above.

If you believe we process your data unlawfully, you may complain to the Slovak Data Protection Authority.

Children

The app is not directed at children under 16 and deliberately collects no data from them.

Changes

If processing changes materially we will tell you in the app before the change takes effect.

Contact

info@jarwizz.com