Privacy policy

Cashout is an expense tracker for Android. It’s made by Ashternext, run by Maalik Bagwala in India (“we”, “us”). This policy covers the Cashout app and this website. Our terms of use cover the rules for using them.

1. Who we are

Cashout is made and run by Ashternext (Maalik Bagwala), India. We decide how and why your data in Cashout is used, and we’re responsible for it. You can reach us at malik@ashternext.com.

2. What we collect

Your account

• Cashout only lets you sign in with Google. When you do, Google gives us your name, email address and profile picture.
• We store a user ID for your account and Google’s ID for your Google account.
• You can change your name in the app, and replace or remove your photo.
• Cashout never sees your Google password.

What you add to Cashout

• Expenses: title, amount, date, category, notes, who paid and how it was split.
• Receipts: photos you scan or attach, and the store name, total, date and items read from them. We store a smaller copy of each photo.
• Plans: your categories, monthly budgets, recurring bills and reminders.
• Income: only if you turn on income tracking. It’s off until you do.
• Shared groups: group names, who’s in each group, the email addresses you invite, each person’s share of an expense, and settle-ups.
• Cashout AI chats: what you typed or said, and Cashout’s replies. We keep them so you can reopen them on any of your devices.
• Settings: such as your currency and reminder preferences.

Records created as you use the app

• AI credits: your balance, and a record of each AI request. The record says which feature you used, when, how big the request was, how many credits it cost and whether it worked. It doesn’t include what you sent.
• Push notifications: a token that lets us send notifications to your phone, and copies of the notifications we send you, such as “Asha added Dinner in Flat 4B”.
• Reports on AI replies: if you report something Cashout AI wrote, we keep the reply, the message before it and the reason you chose, so we can review it.
• Sign-in records: our sign-in provider keeps security records, such as when you signed in, your IP address and the type of device or browser you used.

What we don’t collect

Cashout doesn’t ask for your location, contacts, SMS or call history. It doesn’t read your files. It doesn’t connect to your bank, cards or UPI apps, and never asks for bank or card details. It doesn’t use an advertising ID, and it has no ads, analytics or crash-reporting tools.

3. What stays on your phone

• Offline copy. Cashout keeps a copy of your data in its private storage on your phone, so it works without a connection. Signing out erases it. Cashout leaves its data out of Android’s backups to Google Drive and out of phone-to-phone transfers.
• Reminders. Reminders for your bills and expenses are scheduled on your phone.
• Camera. Cashout uses the camera only while the receipt scanner is open. A photo leaves your phone only when you scan or attach it.
• Photos. When you pick a photo from your gallery, Cashout gets only the photo you picked.
• Microphone. Cashout uses the microphone only while you record a voice note, after you tap the mic. Android asks for permission the first time. The recording is held in memory and never saved as a file.

You can turn off the camera, microphone and notification permissions at any time in Android’s settings. The rest of Cashout keeps working.

4. How we use your data

• To run Cashout: store and sync your data, and work out totals, budgets and balances.
• To run shared groups: show members the group’s expenses, work out who owes whom, and send notifications about invites, shared expenses, settle-ups and reminders from other members.
• To run the AI features when you use them (see section 5).
• To send the reminders and notifications you set up.
• To count AI credits and keep each person’s use within fair limits.
• To keep Cashout secure, prevent abuse and fix problems.
• To reply when you contact us.

We don’t sell or rent your data. We don’t use it for advertising, and we don’t send marketing emails.

5. Cashout AI and Google Gemini

Cashout’s AI features use Google’s Gemini API. The app never talks to Gemini directly. It sends each request to Cashout’s server. The server checks that you’re signed in, counts your AI credits and passes the request to Gemini. Only what that request needs is sent:

• Scanning a receipt: the photo and your category names.
• Adding things in the chat: your message, your name, your category names, the names of your groups and the people in them, and today’s date. The last few lines of the conversation go too, so Cashout can follow it. Those lines can include amounts you typed and totals from Cashout’s earlier replies.
• Voice notes: the recording, so it can be turned into text. Cashout doesn’t keep the recording.
• Questions about your money: your question. Cashout works out the answer on your phone, from your own data. To check which expenses really match a question, it may send their titles, categories, dates and notes, with the amounts removed.

Google processes this for us under its paid Gemini API terms. Under those terms, Google doesn’t use it to train or improve its models. Google may keep it for a limited time to detect abuse and to meet legal requirements.

AI features are optional. If you don’t use them, nothing is sent to Gemini. AI can make mistakes, so check what it fills in before you rely on it.

6. Who can see your data

You

Your data is private to your account, unless you add it to a shared group.

People in your shared groups

A group is made up of the person who created it and the people they invited by email who chose to join. When you’re in a group, its other members can see:

• your name, email address and profile picture;
• expenses added to the group, with their title, amount, date, category, notes, receipt photo and items, who paid and each person’s share;
• settle-ups and balances in that group.

They can’t see your personal expenses, income, budgets, AI chats or AI credits.

Service providers

These companies process data for us, to provide their services to us:

• Supabase: our database, file storage, sign-in and server functions.
• Google: the Gemini API (AI features), Firebase Cloud Messaging (push notifications), and Google sign-in.
• Vercel: hosting for this website.

Legal reasons

We may disclose data if the law requires it, or if it’s needed to protect someone’s safety or our legal rights.

If Cashout changes hands

If Cashout is ever sold or transferred, your data may move to the new owner. We’ll tell you before that happens.

We don’t sell your data or share it with advertisers or data brokers.

7. Where it’s stored and how it’s protected

• Your data is stored with Supabase, on cloud servers. Google processes data for AI features, notifications and sign-in. These servers may be outside India, or outside your country.
• Data is encrypted in transit (HTTPS) between the app, our server and these providers. Our hosting provider also encrypts stored data.
• Access rules in our database let each account reach only its own data and the groups it belongs to.
• The app holds no secret keys for AI. Those stay on our server.
• No system is perfectly secure. If you think you’ve found a problem, please email us.

8. How long we keep it

• While you have an account, we keep your data so Cashout can show it to you.
• Things you delete in the app. A deleted expense, income entry or AI chat disappears from the app at once. On our servers it’s marked as deleted and kept out of sight until you delete your account. This lets your other devices catch up with the deletion. The receipt photo of a deleted expense is kept the same way. If you want something erased sooner, email us.
• Budgets and photos. Removing a budget erases it straight away. Replacing or removing your profile photo erases the old photo.
• When you delete your account, your data is erased from our live database straight away. See Delete your account for exactly what’s deleted and what stays. Our hosting provider keeps backups for a limited period of up to 30 days. After that, your deleted data is gone from them too.
• Sign-in and security records are kept for a limited period.
• Data sent to Gemini may be kept by Google for a limited time, as described in section 5.
• Emails you send us are kept for as long as we need them to deal with your request.

9. Your rights and choices

You can:

• see and correct most of your data in the app;
• ask for a copy of your data. Email us and we’ll send it in a common format, such as JSON or CSV;
• delete specific data, or your whole account, in the app or by email;
• withdraw your consent. Stop using a feature, turn off a permission in Android’s settings, sign out or delete your account. This doesn’t affect what we did before;
• ask questions or complain about how we handle your data.

If you’re in India, you can also nominate someone to use these rights for you if you die or can’t act yourself.

To make a request, email malik@ashternext.com from the Google email address you use with Cashout. We’ll reply within 30 days. If you write from another address, we may need to check that the account is yours first.

If you’re not happy with our reply, you can complain to the data protection authority where you live. In India, that’s the Data Protection Board of India.

10. Children

Cashout is for adults. You must be 18 or older to use it. We don’t knowingly collect data from anyone under 18. If we learn that we have, we’ll delete it. If you think a child is using Cashout, please email us.

11. This website

This website is a few static pages hosted on Vercel. It doesn’t use cookies, analytics or scripts, and its fonts are served from this site, so your browser doesn’t connect to anyone else to show it. Vercel may log basic request details, such as your IP address, to deliver and protect the site.

12. Changes to this policy

We’ll update this policy when Cashout changes. The date at the top shows when it last changed. If a change affects how we use your data, we’ll tell you in the app or by email before it takes effect.

13. Contact us

Developer

Ashternext (Maalik Bagwala)

Country

India

Email

malik@ashternext.com