Privacy Policy
Version 2 · Effective 4 November 2026
This Privacy Policy explains what personal data Cash Tracker ("we", "us") collects when you use the website at cashtracker.pages.dev and its related services (the "Service"), why we use it, who can see it, where it is kept, and what rights you have. It is part of our Terms of Service. Words that start with a capital letter have the meaning given in the Terms.
In short: we keep your email and password, your company name and the plans you build. You, the people you share a scenario with, and the site owner can see them. They are stored with Supabase in Frankfurt, Germany. We do not sell your personal data. You can delete everything at any time with Delete my data.
1. Who is responsible for your data
1.1 Cash Tracker is the controller of the personal data described in this Policy.
1.2 Contact: cashtracker.app@gmail.com
2. The personal data we collect
2.1 Account data: your email address and your password. Your password is stored only in a scrambled (hashed) form that nobody can read, including us.
2.2 Profile data: your company name, the name you type, your settings such as units and currency, and the date and version of the Terms and of this Policy you accepted.
2.3 Plan data: what you enter in the Service, such as projects, amounts, dates, notes, funding terms and scenarios. This is mostly business information. It becomes personal data only where it identifies a person, for example a name you write in a note. We also keep earlier versions of your plan, its history, so that you can see and bring back an earlier version.
2.4 Shared Scenario data: the scenarios you share or join, the members and their permissions, the name shown for each member, whether a member is online in the scenario, and a history of the changes made, with who made each change and when.
2.5 Technical data: when you use the Service, our providers process technical information such as your IP address, browser and device type, and the date and time of requests, to deliver the website, keep it secure and prevent abuse. Your browser also keeps your sign-in session and your preferences, such as light or dark mode, in its local storage.
2.6 Messages: the emails we send you, such as confirming your email or resetting your password, and any message you send us.
3. Why we use your data, and on what basis
| Purpose | Data used | Basis |
|---|---|---|
| Create and run your Account, sign you in, save and show your plans | Account, profile, plan data | Performing our agreement with you (the Terms) |
| Let you share scenarios and work on them with others in real time | Shared Scenario data, your name and email | Performing our agreement with you, at your request |
| Send account emails: confirmation, password reset, important notices | Email address, company name | Performing our agreement with you |
| Keep the Service secure, find and stop abuse, fix faults | Technical data, account data | Our duty to protect the Service and its users, and legal obligations |
| Let the site owner see all accounts to run, support and improve the Service | All data in the Service | Your consent, given when you accept the Terms and this Policy |
| Learn, in total across companies, how companies plan their cash, and build Aggregated Data | Plan data, profile data | Your consent, given when you accept the Terms and this Policy |
| Meet legal obligations and answer lawful requests | Any data that is needed | Legal obligation |
We do not use your personal data for advertising, and we do not send you marketing messages unless you ask for them.
4. Aggregated Data
We may combine data from many accounts into statistics and insights that do not identify you, your company or any person. This Aggregated Data is not personal data. We may use, publish and share it for any lawful purpose, as the Terms explain, and we will not try to identify anyone from it.
5. Who can see your data
5.1 You.
5.2 People you share with. Members of your Shared Scenarios see what is in them, and can see your name, your email address where the Service shows it, when you are online in the scenario and the changes you make.
5.3 The site owner, and people the owner authorizes to help run the Service, who can open every Account. They are expected to keep each company's figures confidential.
5.4 Our service providers, who process data for us under their own terms:
- Supabase: database, sign-in and real-time features. Data is stored in Frankfurt, Germany (European Union).
- Cloudflare: hosting and delivery of the website, through a global network.
- Google: sending account emails through Gmail, and delivering the fonts of the website, which means Google receives your IP address when the page loads.
- jsDelivr: delivering a program library the website uses, which receives your IP address.
5.5 Authorities, when the law requires it or to answer a lawful request, and anyone else where needed to protect the rights, property or safety of Cash Tracker, its users or the public.
5.6 A new owner, if the Service or Cash Tracker is merged, sold or transferred. The new owner will have to respect this Policy for the data it receives.
We do not sell your personal data.
6. Data kept outside the Kingdom of Saudi Arabia
6.1 Your data is stored in the European Union (Frankfurt, Germany), and our providers may process it in other countries where they operate.
6.2 We transfer personal data outside the Kingdom only as the Personal Data Protection Law and its regulations allow, keep the data transferred to what is needed to provide the Service, and choose providers that commit to protecting it.
6.3 If the rules on transfers change, we may move your data or change providers to comply.
7. How long we keep your data
7.1 We keep your data while your Account exists.
7.2 When you use Delete my data, your Account, profile, plans and saved scenarios are deleted from the Service. Shared Scenarios you own are deleted with them; in scenarios owned by others, the changes you made may stay in their history, without your email address.
7.3 Copies may remain for a limited time in backups and in the logs of our providers, until they are overwritten or deleted.
7.4 We may keep data longer where the law requires it, or where it is needed to settle a dispute or to defend a legal claim.
7.5 The history of your plan keeps its last 100 versions, and the history of a Shared Scenario its last 300 changes. Older entries are removed as new ones are added.
8. How we protect your data
We use encrypted connections, scrambled passwords, access rules in the database that keep each Account separate, and limited access for the people who run the Service. No system is fully secure, so we cannot promise that your data will never be lost, changed or seen by people who should not see it. Section 15 of the Terms explains what this means for our responsibility.
9. If something goes wrong
If a security incident affects your personal data, we will act as the law requires, including telling the Saudi Data and Artificial Intelligence Authority (SDAIA) and the people affected where we must.
10. Your rights
Under the Personal Data Protection Law you have the right to:
- be told how your personal data is collected and used, which this Policy does;
- see the personal data we hold about you, and get a copy of it;
- ask us to correct personal data that is wrong or incomplete;
- ask us to delete personal data we no longer need, or delete your Account yourself with Delete my data;
- withdraw your consent at any time, which you can do by deleting your Account. Withdrawing consent does not affect what was done before;
- complain to SDAIA if you believe your rights were not respected.
To use these rights, write to cashtracker.app@gmail.com from the email address of your Account. We may ask you to confirm who you are, and we will answer within the time the law sets.
11. Age
The Service is not meant for anyone under 18, and we do not knowingly collect data about them. If you believe someone under 18 has given us data, contact us and we will delete it.
12. Changes to this Policy
We may change this Policy. If a change is important, we will ask you to accept it in the Service or tell you by email. The version and the date at the top show which version applies.
13. Contact
Cash Tracker · cashtracker.app@gmail.com