Cashful Privacy Choices

This page is the public summary of the privacy-sensitive choices available in Cashful. It does not replace your device settings or the app UI, but it explains the main controls users can rely on today.

1. Notification visibility

Shared-space notifications can reveal finance details such as amount, category, or account information. If that is too visible for your situation, turn off notification permission, disable previews at the iOS level, or avoid enabling the shared notification workflow.

2. Widget and watch-face visibility

Widgets on iPhone and iPad and Cashful watch faces can show balances, account names and today's spending. If others can see your screen or watch, remove the widget or complication, or change your device's Lock Screen and Always On settings.

3. Shared Space access

Shared Spaces are meant for invited participants only. If you no longer want shared visibility, stop using the shared Space, disconnect the shared relationship if that option is available in the app, and verify which participants still have access.

4. Deleting your records

Settings → Delete All Data in the app erases your own Space on this device and restores the default categories and accounts. It does not delete the copy in your iCloud: to remove that, go to iOS Settings → your name → iCloud → Manage Account Storage → Cashful. Records in a shared Space you don't own belong to its owner, who can stop sharing it.

5. iCloud and Apple services

Cashful has no separate account, but it uses your Apple ID and iCloud for sync and sharing. Sync starts automatically when your device is signed in to iCloud. If you do not want your records in iCloud, turn off iCloud for Cashful in iOS Settings → your name → iCloud, and don't join or create shared Spaces.

6. CSV export and import

Once you export a CSV file, later handling depends on the storage provider, file app, or spreadsheet tool you choose. If the exported file contains sensitive finance data, treat that file carefully outside Cashful as well.

7. AI voice input and receipt scanning

Voice input (in the app, with the Siri “Quick expense” command or on Apple Watch) and receipt scanning run only when you start them. Apple turns your speech into text, and Cashful never receives the audio. The text or the receipt photo, with your app language and the names of your categories and accounts, goes to Cashful's server, which passes it through OpenRouter to an AI model (currently Google Gemini, or a backup model if it is unavailable) and returns the amount, category, account and other fields. In the app and on the watch you review them before saving; Siri saves the expense right away, and you can edit it later. Balances and transaction history are not sent, and our server does not store the text or photo. If you prefer no AI processing, use manual entry: nothing is sent for recognition in that flow.

8. Cashful Pro subscription controls

Cashful Pro is an auto-renewable subscription managed by Apple through your Apple ID. You control it independently of the app:

• Cancel anytime: open Settings → your name → Subscriptions → Cashful Pro and choose to cancel. Auto-renewal stops at the end of the current period; Pro features remain available until then.
• Restore purchases: tap “Restore Purchases” on the Cashful paywall or in the Subscription section of the app's settings. Restoration relies on your Apple ID, checked through RevenueCat.
• Refund requests: submit at reportaproblem.apple.com. Apple owns App Store refund decisions; ANApps cannot directly issue or override them.
• RevenueCat data minimization: RevenueCat receives an anonymous user ID, Apple-provided transaction events and basic technical data such as IP address and app version. It never receives your finance records, name, email or Apple ID.

Full subscription terms are in the Terms of Use. Full data handling is in the Privacy Policy.