The short version: Cashflow: Budget Manager stores your transaction data securely on our servers to keep it synced across your devices. We do not sell your data, share it with advertisers, or use it for any purpose other than providing the app to you. If you choose to share a story in the community, that story is visible to other members.
1. Who we are
Cashflow: Budget Manager is a personal finance application and a product of Leadingdots Solutions Pvt Ltd ("we", "us", "our"), a company registered in India. Leadingdots Solutions Pvt Ltd is the data controller responsible for your information. You can reach us at [email protected]. We serve users globally.
2. Information we collect
When you create an account and use the app, we collect the following:
- Account information — your name and email address, collected when you register.
- Transaction data — income, expenses, budget amounts, categories, store names, and notes you enter in the app. This data is stored on our secure servers to enable syncing across your devices and account recovery.
- Notification settings and device identifier — if you turn on notifications, we store a token that identifies your phone to Apple's and Google's notification services, together with your choices (which alerts you want and whether amounts may appear on your lock screen). We remove the token when you sign out or delete your account.
- Receipts and statements you scan — if you choose to scan a receipt or upload a bank statement, the photo or PDF is sent to our AI provider (OpenAI) to read the amount, date, store and, for receipts, the items you bought. We keep the details you save in the app (for example the store and the list of items and prices) so we can show you where your money goes. We do not keep the photo or PDF after it has been read; any temporary copy left behind by an interrupted upload is deleted automatically within a day.
- Community content — if you choose to take part in the community: the stories you post (title, text, type and topic), the display name you use (or the random one we give you), the stories you mark as helpful, the stories you report and the reason you give, and the members you block. This is optional and only collected when you use the community features.
- Usage analytics — anonymous, aggregated data about how features are used (e.g. which screens are visited most). This never includes your financial figures.
- Crash reports — if the app crashes, we may receive a technical report to help us fix the issue. These do not contain your financial data.
- Device information — device type and OS version, collected to ensure compatibility and performance.
3. How your data is stored
Your transaction data and account information are stored on secure servers hosted on Amazon Web Services (AWS). AWS is certified under ISO 27001:2022, SOC 1/2/3, and PCI DSS. Our parent company, Leadingdots Solutions Pvt Ltd, holds an ISO 27001:2022 certification, reflecting a company-wide commitment to information security management best practices. All data is encrypted in transit using TLS and encrypted at rest.
Your data is associated with your account and can be accessed from any device you log into. If you delete your account, your data is permanently deleted from our servers within 30 days.
4. Why we collect your data
We use your data solely to:
- Provide and operate the Cashflow: Budget Manager app and your account
- Sync your transactions across your devices
- Send the notifications you have turned on, such as budget alerts and reminders
- Run, display and moderate the community, including reviewing reports and keeping members safe
- Allow account recovery if you change or lose your device
- Improve app performance and fix bugs
- Respond to your support requests
5. What we do NOT do
- We do not sell, rent, or trade your data to any third party
- We do not use your data for advertising or marketing purposes
- We do not connect to or access your bank accounts
- We do not share your individual financial data with anyone. Your transactions, accounts and budgets are never shown in the community. Only the stories you choose to write are shared
- We do not collect your precise location
6. Data sharing
We do not share your personal or financial data with third parties except in the following limited circumstances:
- Service providers — we use AWS to host our infrastructure. They process data on our behalf under strict data processing agreements and do not use your data for their own purposes.
- Legal requirements — if required by law, court order, or government authority, we may be required to disclose certain information.
- Business transfers — if Cashflow: Budget Manager is acquired or merges with another company, your data may be transferred. We will notify you beforehand.
7. Community content and who can see it
Stories you post are visible to other members of the app. They are shown under your display name only: we do not show your account name, email address or user ID to other members. Anonymous does not mean private. Anything you write in a story is visible to other members, so please do not include your real name, employer, address or account details.
Our team can see which account wrote each story so we can handle reports, enforce our Community Guidelines and respond to legal requests. When you report a story, the author is not told who reported it. Your block list is private to you.
You can delete your own stories at any time. If you delete your account, we delete your stories, your helpful votes and reports, and your block list within 30 days, as part of the account deletion described below. Until then your stories remain visible. Stories removed by a moderator, and the reports about them, are kept while your account exists so we can enforce our rules, and are deleted with it.
8. International data transfers
As a global service with infrastructure on AWS, your data may be stored and processed in regions including the United States and others where AWS operates. We ensure appropriate safeguards are in place for any international transfer, including standard contractual clauses where required by applicable law (such as GDPR).
9. Cookies, analytics, and website tracking
We use cookies and similar technologies only when necessary for site security and functionality. We do not sell personal data or use tracking cookies for advertising. If you choose to allow analytics, we may use aggregated usage data to understand how visitors use our website and improve our service. You can change your decision at any time from the cookie settings link in the footer.
Where required by applicable law, we will obtain clear consent before enabling non-essential cookies, and we will honor your preferences via a cookie consent banner and stored preference in your browser.
10. Third-party services
The app may use the following third-party services, each with their own privacy policy:
- Amazon Web Services (AWS) — secure cloud infrastructure and database hosting
- Google Firebase Cloud Messaging and Apple Push Notification service — deliver the notifications you choose to receive. They receive your device token and the notification text, which keeps money figures out unless you choose to show them
- OpenAI — reads the receipts and statements you choose to scan. Only the file you scan is sent, and only when you scan it. We do not send your other transactions or your account details
- Apple App Store / Google Play — app distribution
- Analytics provider — anonymous usage statistics only when analytics cookies are enabled
11. Data retention
We retain your data for as long as your account is active. If you delete your account, we will permanently delete your personal and transaction data within 30 days, except where retention is required by law.
12. Children's privacy and CIPA compliance
Cashflow: Budget Manager is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children without appropriate parental consent. If a child has created an account or if a parent or guardian believes a child has provided information to us, contact us at [email protected] and we will promptly delete the account and related data. This website is not intended for children and we do not use advertising or behavioural tracking aimed at minors.
13. Your rights
Depending on where you live, you may have rights including:
- Access — request a copy of the data we hold about you
- Correction — request we correct inaccurate data
- Deletion — request deletion of your account and all associated data
- Portability — request your data in a portable format
- Objection — object to certain types of processing
- Restriction — request we restrict processing of your data
These rights apply to users in the EU (GDPR), California (CCPA), and other jurisdictions with applicable privacy laws. To exercise any right, contact us at [email protected]. To request deletion of your account and associated data, use this link: request account and data deletion. We will respond within 30 days.
14. Security
We take security seriously. Leadingdots Solutions Pvt Ltd, the parent company of Cashflow: Budget Manager, holds an ISO 27001:2022 certification — the international standard for information security management. Your data is protected by TLS encryption in transit, encryption at rest on AWS, and access controls that limit who within our team can access user data. We regularly review and audit our security practices. However, no system is completely secure — if you suspect unauthorized access to your account, contact us immediately.
15. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For significant changes that affect how we use your data, we will notify you via email or an in-app notification at least 14 days before the change takes effect.
16. Contact us
For any questions, data requests, or privacy concerns — including requests to access, correct, or delete your data — please contact us at:
Email: [email protected]
We handle all enquiries including general support, privacy requests, and data subject requests through this address.
Account deletion: Request deletion of your account and associated data
You may also reach us by post at either of our offices:
-
Registered Office (India):
Leadingdots Solutions Pvt Ltd
H 154, Beta 2
Greater Noida, Uttar Pradesh, India -
US Office:
Leading Dots USA, Inc
1216 Broadway 30 W
New York, NY 10001, United States
We aim to respond to all enquiries within 2 business days, and within 30 days for formal data subject requests as required by applicable law.