Privacy Policy

Overview

CashDiary ("the App"), developed by Golden Roots, respects your privacy. This Privacy Policy explains what data the App accesses, how it is used, how it is shared, and your choices regarding your data.

By using the App, you agree to the collection and use of information in accordance with this policy.

Data on Your Device

Financial Data

All your financial data - including transactions, accounts, credit cards, loans, budgets, savings goals, trips, and categories - is stored in the App's private storage on your device, which other apps cannot read. This data never leaves your device unless you choose to export it, share it, or back it up to Google Drive. Android's automatic cloud backup is turned off for this App.

Permissions

Camera & Photo Library Access

The App uses your device's camera and photo library to attach receipt photos and images to transactions. Attached images are stored with your transactions on your device and are included in your backups. They are not sent to us or to any third party.

Receipt Scanning

When you scan a receipt, the text is read by Google ML Kit text recognition on your device. The receipt image and its text are not uploaded for this.

Microphone & Voice Input (optional)

If you tap the microphone to add a transaction by voice, the App asks for microphone permission. Your speech is turned into text by your phone's speech recognition service (for example, Google), which may process the audio under its own privacy policy. CashDiary does not record or store any audio.

Content Shared to the App

You can share text or images from other apps into CashDiary (for example, a payment slip). Shared content is used only on your device to help you fill in a transaction.

Notifications

The App may request notification permission to send you bill and card payment reminders, budget alerts, recurring transaction notifications, and backup reminders. Reminders are scheduled on your device and are restored after the phone restarts. You can turn notifications off at any time in the App or in your device settings.

Home Screen Widgets

If you add a CashDiary widget to your home screen, it shows balances and summaries from your device, even while the App is locked. You can turn on Hide amounts on widgets in the App's settings.

Opening Bank & Wallet Apps

To let you jump to your bank or e-wallet app, CashDiary checks on your device whether certain banking and wallet apps are installed. This list is never sent anywhere.

Backup and Restore

Google Drive Backup

The App offers an optional Google Drive backup feature. When you choose to use this feature:

• The App uses the Google Drive drive.file permission, which lets it see only the files it created itself.
• Backups are saved in a CashDiary Backups folder in your own Google Drive and are sent over an encrypted connection (HTTPS/TLS). Golden Roots cannot access them.
• No other files on your Google Drive are accessed, read, or modified.
• Automatic backup (Premium) - If you turn it on, the App backs up to your Drive when you open or return to it (Wi-Fi only by default) and keeps your 10 most recent automatic backups.
• You can delete individual backups or disconnect your Google account at any time in Settings → Backup & Restore.

Local Backup & Export

The App provides multiple ways to export and back up your data locally:

• Excel (.xlsx) - Export transactions as a spreadsheet
• PDF - Generate formatted reports of your transactions
• JSON - Export raw data for personal backup or migration
• CSV - Export in comma-separated format for use in other applications

Exported files are saved where you choose or shared with the app you pick. The App does not upload them to any server. You are responsible for managing and securing exported files.

Google Sign-In

If you use the Google Drive backup feature, you will be asked to sign in with your Google account. The App accesses only the following information:

• Email address - to display which account is connected
• Display name - to show your name in the settings screen
• Profile photo - to show your avatar in the settings screen

This information is used only for display purposes within the App and is not stored on any external server or shared with any third party.

In-App Purchases

CashDiary is free to download. Premium is an optional monthly or yearly subscription that removes ads and unlocks extra features such as automatic Google Drive backup. Purchases are processed by Google Play Billing. We do not receive your payment details; the App only checks with Google Play whether you have an active subscription.

Advertising

The App displays advertisements using the following third-party advertising SDKs:

These SDKs may collect data automatically to serve relevant advertisements. You can opt out of personalized ads through your device's advertising settings:

• Android: Settings → Privacy → Ads → Delete advertising ID

In the EEA, the UK, and Switzerland, the App asks for your consent through Google's consent form before showing personalized ads. You can change your choice at any time in Settings → Ad privacy settings. Premium subscribers see no ads. Some optional features let you watch a short rewarded ad to use them.

For more information, see: Google Privacy Policy | Unity Privacy Policy | Pangle Privacy Policy | Liftoff Privacy Policy | InMobi Privacy Policy

Analytics & Crash Reports

The App uses the following Google Firebase services:

• Firebase Analytics - app opens, screens viewed, and which features are used
• Firebase Crashlytics - crash reports with device model, OS version, app version, and your language, country, and currency settings
• Firebase Remote Config - app settings delivered without an app update

This data is linked to a random app-instance identifier, not to your name or email. Transaction amounts and other financial records are never sent. In regions where consent is required (EEA, UK, Switzerland), Analytics and Crashlytics stay off until you agree, and you can change this at any time in Settings → Ad privacy settings.

For more information, see: Firebase Privacy Policy

Other Online Services

Some features download public data. These requests contain no financial data, but like any internet request, the server can see your IP address:

• Exchange rates - from Frankfurter (api.frankfurter.dev) and ExchangeRate-API (open.er-api.com), for multi-currency accounts and trips
• PDF fonts - from the jsDelivr CDN, so PDF reports display your language correctly
• Bank icons - from Google Play's image servers
• Firebase Remote Config - to receive app settings (such as ad settings) without an app update

Data Collection Summary

Listed in the same order and with the same names as the Data safety section on Google Play. "Collected" means the data leaves your device; data that stays on your phone is marked "On device only".

All data sent over the internet is encrypted in transit using HTTPS/TLS.

Important: Your financial data (transactions, accounts, credit cards, loans) is never shared with any third party. It stays on your device or in your personal Google Drive backup.

Data Deletion

You can delete your data in the following ways:

1. Delete Financial Data (In-App)

Open the App → Settings → Backup & Restore → Clear All Data to erase all transactions, accounts, credit cards, loans, categories, and saved images from your device.

2. Delete Google Drive Backups

You can remove your backups in any of these ways:

• In Settings → Backup & Restore, delete backups one by one
• When using Clear All Data, tick Also delete my Google Drive backups and Also sign out of Google
• Delete the CashDiary Backups folder directly in Google Drive

3. Delete Exported Files

Exported files (Excel, PDF, JSON, CSV) are saved where you chose. Navigate to your device's file manager and delete the exported files manually.

4. Delete All Local Data

Uninstall the App from your device to remove all locally stored data, including financial records, images, settings, and PIN configuration.

Important: We do not maintain any user data on our own servers. All data is stored locally on your device or in your personal Google Drive account.

Data Security

We take the security of your financial data seriously. The following measures are in place:

• All data transmitted between the App and external services is encrypted using HTTPS/TLS
• Financial data is kept in the App's private storage, which other apps cannot read, and is excluded from Android's automatic cloud backup
• The optional 6-digit PIN is protected with PBKDF2 hashing (100,000 iterations) and stored in Android's encrypted storage
• Biometric authentication (fingerprint/face) provides additional security
• Google Drive backup can only reach the files the App created in your own Drive
• The App does not store any user data on external servers owned or operated by Golden Roots

App Security

CashDiary offers security features to protect your financial data:

• Optional 6-digit PIN lock - When it is on, the PIN is needed to open the App
• Biometric authentication - Supports fingerprint and face recognition as a convenient alternative to PIN. Biometric checks are handled by Android; the App never receives your fingerprint or face data
• Password hashing - Your PIN is hashed using PBKDF2 with 100,000 iterations and kept in Android's encrypted storage (Keystore)
• PIN recovery - A recovery code and an optional security question let you reset a forgotten PIN; both are checked on your device only
• Auto-lock - The App locks again after it has been in the background longer than the time you choose (immediately, 1, 3, or 10 minutes)

No Account Required

The App is fully functional without creating an account or providing any personal information. Google Sign-In is only needed for the optional Google Drive backup feature. You can use all financial tracking, budgeting, and export features without signing in.

Children's Privacy

This App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided personal data through the App, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable laws. Any changes will be reflected on this page with an updated "Last updated" date.

Contact Us