Privacy Policy

When you create an account, we collect your email address and password (stored securely via Supabase authentication). When you use the Service, we store the financial records you enter: transactions, categories, notes, amounts, and dates. We do not collect sensitive financial information such as bank account numbers, credit card numbers, or tax identification numbers.

We use the information we collect to provide and operate the Service, power the AI Whisper assistant to answer your financial questions, process subscription payments via Stripe, send transactional emails (account verification, billing receipts), and improve the Service through aggregate, anonymized usage analytics.

We do not sell your personal or financial data. We share data only with third-party service providers necessary to operate the Service: Supabase for authentication and database hosting, Stripe for payment processing, and Anthropic for AI inference powering the Whisper assistant. Each provider is bound by their own privacy policies and data processing agreements.

When you invite someone to your household, they gain access to all transactions recorded within that household. You are responsible for managing who has access to your household. You can remove members at any time from your household settings.

We retain your data as long as your account is active. If you delete your account, we will permanently delete your personal data and transaction history within 30 days, except where retention is required by law (e.g., billing records). Whisper conversation sessions are held for up to 30 minutes of inactivity and automatically cleared — they are never stored long-term.

We use industry-standard security measures including encryption in transit (HTTPS/TLS) and at rest. Authentication is managed by Supabase, which provides secure, token-based sessions. Despite our best efforts, no system is completely secure — please use a strong, unique password.

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and export your data in a portable format. To exercise any of these rights, contact us at privacy@cash-whisper.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The last updated date at the top of this page reflects the most recent revision.

For privacy-related questions, reach us at privacy@cash-whisper.com.