Privacy Policy

1. Introduction

Welcome to CashWith ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment profile sharing platform at cashwith.app (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Username, email address, and password when you create an account
• Profile Information: Bio, avatar image, and profile theme preferences
• Payment Methods: Payment app usernames and handles (we do NOT store financial account numbers, credit card information, or banking details)
• Contact Information: When you import contacts, we store names, email addresses, and phone numbers (hashed for privacy)
• Communications: Any messages or feedback you send to us

2.2 Information Collected Automatically

• Usage Data: Profile views, compatibility checks, and feature usage patterns
• Device Information: Browser type, operating system, and device type
• Log Data: IP address, access times, and pages viewed
• Cookies: Session cookies for authentication and preference storage

2.3 Information from Third-Party Services

• OAuth Providers: Basic profile information when you sign in with Google or Facebook
• Google Contacts: Contact information when you explicitly grant permission to import contacts

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your payment profile to other users
• Enable payment method compatibility checking between users
• Help you find friends who are already on CashWith
• Send invitations to your contacts (only with your explicit permission)
• Improve and optimize our Service
• Communicate with you about updates, security alerts, and support
• Enforce our Terms of Service and prevent fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Public Information

Your username, bio, avatar, and payment methods are visible on your public profile. You can control your profile visibility in your privacy settings.

4.2 We Do NOT Share

• Your email address with other users
• Your imported contacts with other users
• Your personal information with advertisers
• Any financial account details (we don't collect these)

4.3 We May Share With

• Service Providers: Third-party services that help us operate our platform (e.g., hosting, analytics)
• Legal Requirements: If required by law or to protect rights and safety
• Business Transfers: In connection with a merger, sale, or acquisition
• With Your Consent: When you explicitly agree to sharing

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using HTTPS
• Secure password hashing using industry-standard algorithms
• Regular security audits and updates
• Limited access to personal information by employees
• Two-factor authentication option for enhanced account security

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide you with our Service and as described in this Privacy Policy. We will also retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we delete or anonymize your personal information, except where we are required to retain it by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and personal information
• Portability: Export your data in a machine-readable format
• Withdrawal of Consent: Revoke permissions for contact access
• Privacy Settings: Control who can see your profile

To exercise these rights, please contact us at privacy@cashwith.app or use the settings in your account.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some features of our Service.

9. Third-Party Services

Our Service may contain links to third-party websites or services that are not owned or controlled by CashWith. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We use the following third-party services:

• Supabase: For authentication and database services
• Vercel: For hosting and deployment
• Google OAuth: For social login and contact import
• Facebook OAuth: For social login

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfer

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• The right to access, update, or delete your personal information
• The right to rectification if your information is inaccurate or incomplete
• The right to object to our processing of your personal information
• The right to restrict the processing of your personal information
• The right to data portability
• The right to withdraw consent

Our legal basis for collecting and using your personal information is your consent, the performance of our contract with you, and our legitimate business interests.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

We will notify you via email and/or a prominent notice on our Service for any material changes, and obtain your consent where required by law.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

16. Data Protection Officer

For privacy-related inquiries, you may also contact our Data Protection Officer at dpo@cashwith.app.