Privacy Policy & Terms of Use

1. Introduction

CashLedzz ("the App", "we", "us", "our") is a personal finance tracking application designed to help you manage your expenses, income, budgets, savings goals, and recurring transactions. The App is built with a privacy-first, offline-first philosophy.

We do not collect, store, transmit, or process any of your personal or financial data on any server. All data you enter into CashLedzz resides exclusively on your device and is fully under your control.

CashLedzz offers a free tier with core functionality and an optional one-time, lifetime premium upgrade ("CashLedzz Pro") available as an in-app purchase through Google Play. The purchase process is handled entirely by Google Play Billing and RevenueCat (a third-party purchase management service). We do not process, store, or have access to your payment credentials.

By downloading, installing, or using CashLedzz, you agree to the terms outlined in this Privacy Policy and Terms of Use. If you do not agree, please uninstall the App and discontinue use immediately.

2. Definitions

• "Personal Data" — Any information that identifies or can be used to identify you, including financial records, account names, transaction notes, and SMS content.
• "Device" — The smartphone, tablet, or other mobile device on which you install and use the App.
• "Local Storage" — Data stored in the App's SQLite database and secure storage on your device, accessible only by the App.
• "You" / "User" — Any individual who installs or uses the App.
• "CashLedzz Pro" — The premium tier of the App, unlocked via a one-time in-app purchase.
• "RevenueCat" — A third-party service used to validate purchase receipts and manage entitlement status. See Section 12 for details.

3. Data Storage & Privacy

3.1 All Data Is Stored Locally

All financial data, settings, preferences, and configurations are stored exclusively on your device using a local SQLite database. This includes:

• Expenses and income transactions
• Account balances and details
• Budget configurations
• Financial goals and contributions
• Recurring transaction schedules
• Custom categories and income sources
• App preferences and settings
• Detected SMS transactions (if enabled)

3.2 No Cloud Storage or Sync

CashLedzz does not provide cloud sync or cross-device synchronization for your financial data. Your data exists solely on the device where you install and use the App.

3.3 No Accounts or Registration

CashLedzz does not require you to create an account, register, sign up, or log in. There is no server-side user identity associated with your usage. When you make a purchase, your identity is managed by Google Play and RevenueCat using an anonymous identifier — we never see your name, email, or Google account details.

3.4 No Data Transmission

Your financial data, transaction records, account details, and personal notes are never transmitted over the internet, shared with third parties, or uploaded to any server — by us or by any embedded third-party service.

The only network activity performed by the App relates to purchase validation (see Section 11) and fetching this Privacy Policy document.

4. Information We Do NOT Collect

To be absolutely clear, CashLedzz does not collect, access, store, or transmit:

• Your name, email address, phone number, or any personal identity information
• Your location or GPS data
• Your contacts, call logs, or browsing history
• Your photos, camera data, or microphone input
• Usage analytics, behavioral data, or telemetry
• Crash reports or diagnostics
• Advertising identifiers or device fingerprints
• Any financial data to external servers
• IP addresses or network metadata
• Cookies, tracking pixels, or session identifiers
• Your credit card number, UPI ID, or any payment credentials

We have zero analytics, zero tracking, zero advertising, and zero crash reporting integrated into the App.

5. Information Stored Locally on Your Device

The following data is created and stored locally when you use the App:

Data Type	Storage Location	Purpose
Expense transactions (amount, date, category, notes, account)	SQLite database	Core tracking feature
Income transactions (amount, date, source, notes, account)	SQLite database	Core tracking feature
Account details (names, balances, icons, colors)	SQLite database	Account management
Budget configurations (category, amount, month)	SQLite database	Budget tracking
Financial goals (title, target, progress, deadline)	SQLite database	Savings goal tracking
Goal contributions	SQLite database	Goal progress tracking
Recurring transactions (amount, interval, status)	SQLite database	Automation
Custom categories and income sources	SQLite database	Personalization
Detected SMS transactions (amount, type, date, hash)	SQLite database	Smart detection feature
App settings (theme, currency, notification preferences)	SQLite database	Preferences
PIN hash (if app lock enabled)	Secure Store (encrypted)	Security
Recovery code hash (if app lock enabled)	Secure Store (encrypted)	Security
Premium status (active or inactive)	Local cache	Feature gating

None of this data ever leaves your device through the App.

6. SMS Permissions & Transaction Detection

6.1 What Permissions Are Requested

If you choose to enable the Smart Detect feature, CashLedzz requests the following Android permissions:

• READ_SMS — To scan your SMS inbox for bank transaction alerts
• RECEIVE_SMS — To detect incoming bank transaction SMS in real time

6.2 How SMS Data Is Used

• The App only reads SMS messages that match patterns of bank transaction alerts (debit/credit notifications).
• SMS messages are parsed locally on your device to extract the transaction amount, type (income/expense), and date.
• The raw SMS text is stored temporarily in the user's device SQLite database to aid deduplication and is never transmitted to any server.
• Non-transactional SMS (personal messages, OTPs, verification codes, promotional messages) are automatically filtered out and ignored.

6.3 How SMS Data Is NOT Used

• SMS content is never sent to any server, API, or third-party service.
• SMS content is never used for profiling, marketing, or advertising.
• SMS content is never shared with any entity.
• We do not read, store, or access personal or non-financial SMS messages.

6.4 SMS Permission Is Optional

• The Smart Detect feature and its associated SMS permissions are entirely optional.
• You can use CashLedzz fully without granting SMS permissions.
• You can revoke SMS permissions at any time through your device's Settings, and the App will continue to function normally without the Smart Detect feature.

7. Device Permissions

CashLedzz requests the following permissions, all of which are used locally on your device:

Permission	Purpose	Required?
READ_SMS	Scan SMS for bank transaction alerts	Optional (Smart Detect)
RECEIVE_SMS	Real-time SMS transaction detection	Optional (Smart Detect)
POST_NOTIFICATIONS	Display local reminders and alerts	Optional
com.android.vending.BILLING	In-app purchase via Google Play	Automatic (for Pro upgrade)
Biometric sensor	Fingerprint/Face ID for app lock	Optional
File system (app-scoped)	Export and backup file creation	Automatic
Vibration/Haptics	Tactile feedback on interactions	Automatic
Internet	Purchase validation and privacy policy fetch	Automatic (limited)

CashLedzz does not request or access: Camera, microphone, location, contacts, call logs, or calendar.

8. Security Features

8.1 App Lock (PIN & Biometrics)

• You may enable a 4-digit PIN lock to protect the App.
• Your PIN is hashed using SHA-256 before storage and is stored in your device's secure enclave (via the operating system's secure storage mechanism). The actual PIN is never stored in plain text.
• Optionally, you may enable biometric authentication (fingerprint or face recognition) as a convenient unlock method.
• A recovery code is generated when you set up your PIN. This code is also hashed before storage. You are responsible for keeping your recovery code safe.

8.2 Backup Integrity

• Exported backup files include a cryptographic signature (SHA-256 hash) to detect tampering.
• If a backup file is modified outside the App, restoration will fail to protect data integrity.

8.3 Security Limitations

• While we employ industry-standard hashing for PIN storage, no security measure is entirely foolproof.
• The App's security depends on the security of your device's operating system and hardware.
• If your device is compromised (rooted, jailbroken, infected with malware), the App's security features may be bypassed.

9. Data Export & Backup

9.1 Export Options

You can export your data in the following formats:

• XLSX (Excel) — Styled spreadsheet with multiple sheets covering transactions, accounts, budgets, and goals.
• PDF — Formatted financial reports.
• JSON Backup — Complete database snapshot for backup and restoration purposes. Includes a cryptographic signature to prevent tampering.

9.2 Your Responsibility

• Exported files are saved to your device or shared via the system share dialog (email, messaging apps, cloud storage, etc.).
• Once data is exported and shared, it is outside the App's control. You are solely responsible for the storage, security, and distribution of exported files.
• We strongly recommend storing backup files in a secure location and not sharing them with untrusted parties.

9.3 Backup Restoration

• You can restore data from a JSON backup file.
• The App verifies the cryptographic signature during restoration. Tampered files will be rejected.

10. Notifications

10.1 Local Notifications Only

All notifications generated by CashLedzz are scheduled and triggered locally on your device. No remote push notification server is used to send messages.

10.2 Types of Notifications

• Daily expense tracking reminders (configurable timing)
• Weekly spending summaries
• Monthly financial reviews
• Budget threshold alerts (80%, 100%, exceeded)
• Recurring transaction due reminders
• Backup reminders
• SMS-detected transaction alerts

10.3 Notification Control

• All notification types are optional and can be individually enabled or disabled in the App's Preferences.
• You can also manage or disable notifications through your device's system Settings.

11. Network Usage

11.1 Limited Network Access

CashLedzz is designed to function primarily offline. The App makes network requests only in the following scenarios:

Network Request	When It Occurs	Data Sent	Data Received
Privacy Policy fetch	When you view the privacy policy in the App	None (standard HTTP GET)	This document (from GitHub)
Purchase validation	When you buy or restore CashLedzz Pro	An anonymous device ID and a Google Play purchase receipt (token)	Entitlement status (active/inactive)
Entitlement check	Each time the App launches	An anonymous device ID	Premium status (active/inactive)

11.2 What Is Sent During Purchase Validation

When you purchase or restore CashLedzz Pro, the following data is transmitted to RevenueCat's servers (see Section 12):

• An anonymous, randomly generated device identifier (e.g., $RCAnonymousID:a1b2c3d4...). This is not your name, email, phone number, or Google account email.
• A Google Play purchase receipt (token) — A cryptographic proof of purchase issued by Google Play. This token allows RevenueCat to verify with Google's servers that the purchase is legitimate.

No financial data, transaction records, account details, SMS content, or personal information from within CashLedzz is ever transmitted.

11.3 No Remote APIs for Core Functionality

The App does not communicate with any backend server, REST API, GraphQL endpoint, or cloud service for its core financial tracking functionality.

11.4 No Analytics or Tracking

There are no analytics SDKs, tracking libraries, event loggers, or telemetry services embedded in the App. Your usage patterns are not monitored, recorded, or analyzed by us or any third party.

12. In-App Purchases & CashLedzz Pro

12.1 What Is CashLedzz Pro?

CashLedzz Pro is a one-time, lifetime in-app purchase that permanently unlocks premium features including:

• Unlimited accounts, budgets, and financial goals
• Advanced charts (Trends, Velocity, Savings Pulse)
• Finance Calendar
• Smart prediction notifications
• Cloud backup & restore
• Dark theme
• App lock & biometric authentication
• Unlimited data exports and custom reports
• Full icon library
• All future premium features

12.2 How Purchases Are Processed

All payments are processed through Google Play Billing. CashLedzz does not:

• Collect, process, or store your credit card, debit card, UPI, or any payment credentials
• Have access to your payment method details
• Process or handle money directly

The payment flow works as follows:

1. You tap "Upgrade to Pro" in the App.
2. Google Play displays its native, secure payment sheet.
3. You authenticate and confirm payment through Google Play.
4. Google Play charges your payment method and issues a purchase receipt.
5. The App sends this receipt to RevenueCat for server-to-server validation with Google.
6. Upon successful validation, RevenueCat confirms the entitlement and the App unlocks premium features.

12.3 RevenueCat — Third-Party Purchase Management

We use RevenueCat, Inc. as a third-party service to manage in-app purchase receipt validation and entitlement tracking.

What RevenueCat receives:

• An anonymous device identifier (not your name, email, or Google account)
• Google Play purchase receipts (tokens) for server-side validation

What RevenueCat does NOT receive:

• Your name, email address, phone number, or Google account email
• Your financial data, transactions, account balances, or any content from within the App
• Your SMS messages, contacts, or any other personal data
• Your payment credentials (these are handled exclusively by Google Play)

RevenueCat's role is limited to:

• Verifying that a purchase receipt from Google Play is legitimate (preventing fraud)
• Remembering that your anonymous device ID is associated with an active premium entitlement
• Allowing you to restore your purchase on a new device using the same Google Play account

For more information, please review RevenueCat's Privacy Policy at: revenuecat.com/privacy

12.4 Purchase Restoration

• Your CashLedzz Pro purchase is tied to the Google account signed into the Google Play Store at the time of purchase.
• If you reinstall the App, switch devices, or clear app data, you can tap "Restore Purchase" to recover your premium access at no additional cost.
• The restore process works by asking Google Play if the currently signed-in Google account owns a valid CashLedzz Pro purchase. If it does, premium features are re-activated instantly.
• If no purchase is found, it means the Google account currently signed into your Play Store app is different from the one originally used for the purchase.

12.5 Pricing

• The price of CashLedzz Pro is displayed in your local currency on the Google Play purchase screen.
• Google may apply currency conversion and local taxes as applicable.
• The price may vary by region based on Google Play pricing policies.

12.6 Refund Policy

• CashLedzz Pro is a one-time, non-consumable, lifetime purchase. Once purchased, it does not expire.
• Refund requests are handled exclusively by Google Play in accordance with Google Play's refund policies.
• To request a refund, visit Google Play's support page or contact Google Play support directly. We do not process refunds independently.
• If a refund is granted by Google Play, your CashLedzz Pro entitlement will be revoked and premium features will be locked.
• For refund-related queries, you may also contact us at [email protected] and we will assist you to the best of our ability.

13. Third-Party Services & Libraries

13.1 Third-Party Services

CashLedzz integrates with the following third-party services:

Service	Purpose	Data Shared	Privacy Policy
Google Play Billing	Processing in-app purchases	Payment handled entirely by Google	Google Privacy Policy
RevenueCat	Purchase receipt validation and entitlement management	Anonymous device ID + purchase receipt	RevenueCat Privacy Policy

13.2 Third-Party Libraries

CashLedzz uses open-source libraries for device-local functionality. None of these libraries transmit your personal or financial data to external servers.

We do not use any libraries from Google Analytics, Facebook SDK, Firebase Analytics, Amplitude, Mixpanel, Sentry, Bugsnag, or any similar data-collecting service.

14. Root/Jailbreak Detection

14.1 What We Detect

CashLedzz performs a local check to determine if your device has been rooted (Android) or jailbroken (iOS). This check examines:

• System build tags
• Presence of common superuser binaries
• Installed root management applications
• System partition write permissions

14.2 Why We Detect It

Rooted or jailbroken devices have weakened security boundaries. Other apps on a compromised device may be able to access CashLedzz's local database, bypass the app lock, or extract your financial data.

14.3 What Happens

• If a compromised device is detected, the App displays a warning informing you of the risk.
• The App does not block functionality — you may choose to continue using it at your own risk.
• The root/jailbreak status is checked locally and is never reported to us or any third party.

15. Device Theft, Loss & Unauthorized Access

15.1 Your Responsibility

Since all data is stored locally on your device, the security of your data is directly tied to the security of your physical device. You are responsible for:

• Keeping your device physically secure
• Using a strong device lock screen (PIN, password, pattern, biometric)
• Enabling CashLedzz's built-in app lock feature
• Safeguarding your CashLedzz recovery code
• Not sharing your device unlock credentials with untrusted individuals
• Keeping your device's operating system updated with security patches

15.2 Limitation of Liability for Device Compromise

We are not responsible for any data exposure, data loss, or unauthorized access to your financial information in the following scenarios:

• Device theft or loss — If your device is stolen or lost, anyone with physical access to the device may be able to access data stored on it, potentially including CashLedzz data. We strongly recommend enabling the App's PIN/biometric lock.
• Unauthorized physical access — If someone gains access to your unlocked device, they may be able to view, export, or delete your CashLedzz data.
• Rooted/jailbroken devices — If your device is rooted or jailbroken, other apps may be able to read CashLedzz's local database, bypassing the App's security measures.
• Malware or spyware — If your device is infected with malware, keyloggers, screen recorders, or spyware, your data within CashLedzz may be compromised.
• Shared or public devices — If you use CashLedzz on a shared, borrowed, or public device, other users may access your data.
• Backup file mishandling — If you export a backup file and store it in an insecure location, share it publicly, or send it to an untrusted party, the data within that backup may be compromised.
• Device disposal — If you sell, donate, give away, or dispose of your device without performing a factory reset, residual CashLedzz data may be recoverable.
• Screen capture or recording — If other apps or system features capture screenshots or screen recordings while CashLedzz is open, your financial data may be visible in those captures.
• Shoulder surfing — If someone observes your screen while you are using the App.
• Operating system vulnerabilities — If your device's operating system has unpatched security vulnerabilities.
• Custom ROMs or unofficial firmware — If your device runs unofficial or modified operating system software.
• USB debugging or developer mode — If your device has USB debugging or developer options enabled, data may be accessible via ADB or similar tools.

15.3 Recommended Precautions

To protect your financial data, we recommend:

1. Enable CashLedzz's PIN lock and biometric authentication
2. Use a strong device lock screen
3. Keep your operating system updated
4. Avoid using CashLedzz on rooted/jailbroken devices
5. Do not install apps from untrusted sources
6. Factory reset your device before selling or disposing of it
7. Store backup files in a secure, encrypted location
8. Do not share your PIN or recovery code with anyone
9. Be aware of your surroundings when viewing sensitive financial data
10. Regularly back up your data to protect against device failure or loss

16. Data Deletion & Uninstallation

16.1 Uninstalling the App

When you uninstall CashLedzz, all locally stored data — including the SQLite database, secure store entries, and cached files — is permanently deleted by the operating system. This action is irreversible.

16.2 No Residual Data on Our End

Since we do not store any of your personal or financial data on any server, there is no residual data to request deletion of. Uninstalling the App constitutes complete data deletion for all financial data.

16.3 RevenueCat Purchase Records

RevenueCat retains a record of your anonymous device ID and associated purchase entitlement for the purpose of enabling purchase restoration. This record contains no personal information (no name, email, or financial data). If you wish to request deletion of this anonymous record, you may contact us at [email protected] and we will submit a deletion request to RevenueCat on your behalf.

16.4 In-App Data Management

• You can delete individual transactions, accounts, budgets, goals, and recurring transactions within the App at any time.
• You can clear all detected SMS transactions.
• You can reset the App's settings to defaults.

16.5 Right to Data Portability

You may export all your data at any time via the App's export features (XLSX, PDF, or JSON backup) before uninstalling.

17. Children's Privacy

CashLedzz is not intended for use by children under the age of 13. We do not knowingly collect or store information from children under 13. Since the App does not collect any personal information or transmit data to servers, there is no mechanism through which such data could be inadvertently gathered by us.

CashLedzz Pro purchases require a valid Google Play account and payment method. Parental controls and purchase approvals are managed through Google Play's Family Link or device-level settings.

If you are a parent or guardian and believe your child has been using the App inappropriately or made an unauthorized purchase, you can uninstall the App from the device (which will permanently delete all locally stored data) and request a refund through Google Play.

18. Disclaimer of Warranties

THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:

• Merchantability or fitness for a particular purpose
• Accuracy or reliability of any financial calculations, summaries, reports, or SMS-parsed transactions
• Uninterrupted or error-free operation
• Compatibility with all devices, operating systems, or configurations
• Complete security against all threats, attacks, or unauthorized access
• Availability of in-app purchase services (which depend on Google Play and RevenueCat)

The App is a personal finance tracking tool, not a certified financial advisor, accounting software, or tax preparation tool. You should not rely solely on the App for financial, tax, legal, or investment decisions.

19. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• We shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the App.
• We shall not be liable for any loss of data, financial loss, or damages resulting from:
  • Device theft, loss, or unauthorized access
  • Device malfunction, failure, or damage
  • Operating system bugs, updates, or incompatibilities
  • Incorrect SMS parsing or missed transaction detection
  • Incorrect financial calculations or reports
  • Corrupted backup files or failed restorations
  • Third-party apps interfering with the App's operation
  • Google Play or RevenueCat service outages or disruptions
  • Failed, delayed, or incorrectly processed purchases
  • Force majeure events (natural disasters, power outages, etc.)
• Our total liability, if any, shall not exceed the amount you paid for CashLedzz Pro.

20. Terms of Use

20.1 Acceptable Use

By using CashLedzz, you agree to:

• Use the App only for lawful personal finance management purposes
• Not reverse engineer, decompile, disassemble, or attempt to extract the App's source code
• Not modify, adapt, or create derivative works based on the App
• Not use the App in any way that could damage, disable, overburden, or impair your device
• Not attempt to circumvent the App's security features or premium feature gating
• Not use modified devices, tools, or third-party software to fraudulently obtain CashLedzz Pro without payment
• Not redistribute, sell, lease, or sublicense the App

20.2 User Responsibility

• You are solely responsible for the accuracy of the data you enter into the App.
• You are solely responsible for backing up your data regularly.
• You are solely responsible for the security of your device and your CashLedzz PIN/recovery code.
• You acknowledge that SMS transaction detection is a convenience feature and may not detect all transactions or may occasionally misparse amounts. You should always verify detected transactions before logging them.
• You acknowledge that the App provides no guarantee of financial accuracy and should not be your sole financial record-keeping method.
• You acknowledge that CashLedzz Pro is a one-time purchase tied to your Google Play account, and that loss of access to that Google account may affect your ability to restore your purchase.

20.3 Purchase Terms

• By purchasing CashLedzz Pro, you agree to the price displayed on the Google Play purchase screen at the time of transaction.
• All purchases are processed by Google Play. Your agreement for payment processing is with Google, governed by Google Play's Terms of Service.
• CashLedzz Pro is a non-consumable, lifetime purchase. It does not auto-renew and there are no recurring charges.
• Premium features are delivered immediately upon successful payment verification.
• Refunds are governed by Google Play's refund policy (see Section 12.6).

20.4 Termination

• You may stop using the App and uninstall it at any time.
• We reserve the right to discontinue the App at any time without prior notice.
• If the App is discontinued, your CashLedzz Pro purchase remains valid for as long as you have the App installed. However, we cannot guarantee continued functionality if supporting services (Google Play, RevenueCat) are discontinued.

21. Intellectual Property

• CashLedzz, its name, logo, design, icons, and user interface are the intellectual property of the developer.
• All open-source libraries used are attributed to their respective authors and are used in accordance with their licenses.
• You are granted a limited, non-exclusive, non-transferable, revocable license to use the App for personal, non-commercial purposes.

22. Governing Law & Dispute Resolution

• This Privacy Policy and Terms of Use shall be governed by and construed in accordance with the laws of India.
• Any disputes arising under or in connection with this document shall be subject to the exclusive jurisdiction of the courts in India.
• Before initiating any legal proceedings, you agree to attempt to resolve disputes by contacting us directly at the email address provided below.

23. Changes to This Policy

• We may update this Privacy Policy and Terms of Use from time to time.
• The "Last Updated" date at the top of this document will reflect the most recent revision.
• Continued use of the App after changes are published constitutes your acceptance of the revised policy.
• We recommend reviewing this policy periodically to stay informed of any updates.
• Since the App does not collect your email or any contact information, we cannot actively notify you of policy changes. The updated policy will be available within the App.

24. Contact Us

If you have questions, concerns, or suggestions regarding this Privacy Policy, the App, or your CashLedzz Pro purchase, you may contact us at:

Email: [email protected]