Privacy Policy

1. Who we are

CashCurator is developed and operated by Fail Shakhmaev, an individual developer based in Kazakhstan, who is the data controller. This policy covers the Android and iOS apps, cloud features and cashcurator.pro. Privacy and account deletion requests: info@chiefhead.com.

2. Data we use

• Account: email, profile name, avatar and account identifier, to provide your account and verify access.
• Budget records: amounts, dates, currencies, categories, notes, purchase items, receipts and sharing settings, to provide tracking, reports and the cloud features you use.
• Subscriptions: purchase identifiers, verification tokens, products and subscription status, to enable paid features. Stores process card payments; we do not request banking passwords, PINs or CVV codes.
• Technical data: IP addresses, request times, session and installation identifiers, device/app versions, usage events, crash reports and push tokens, for authentication, security, notifications, diagnostics and analytics.
• Support: contact details and materials you send us, to respond to your requests.

Local budget records can be used without an account. Cloud features transmit relevant records and attachments to our servers; technical SDK collection is separate from budget synchronization. Receipt OCR currently runs on your device, but receipts may be uploaded when cloud attachment storage is used. We do not sell personal or sensitive user data.

3. Why processing is permitted

We rely on performance of the service contract for necessary account and cloud functions, legal obligations for required records, consent where required for optional processing, and legitimate interests for proportionate security and diagnostics where the law permits. This policy is not consent to all processing. The registration confirmation is described in the Data Processing Consent; it does not authorize optional analytics.

4. Sharing and service providers

Authorized budget participants can access shared records, receipts and relevant profile information. Exported files and copies saved by recipients remain outside our control when access is revoked. Share only information you are entitled to disclose.

We use Google Analytics for Firebase, Firebase Crashlytics, Firebase Cloud Messaging, Apple APNs where supported, and purchase verification through the relevant store. Aeza hosts our main server in Stockholm, Sweden. Receipts, avatars and backups are stored in Cloudflare R2 using its automatic location selection, without a jurisdictional restriction. Their storage is not guaranteed to remain in a particular country or the EU. Necessary access may also be provided to authorized support staff, lawful authorities or a successor operating the service, subject to applicable safeguards.

See Firebase privacy information, Google’s policy, Cloudflare’s data-processing terms and Apple’s policy.

5. Storage and analytics

Our main server is in Stockholm, Sweden. Service providers may store and process data outside your country. Google and Cloudflare describe international transfer protections, including Standard Contractual Clauses where applicable, in their data-processing terms. You can contact us for information about relevant processing locations and transfer safeguards.

Mobile analytics and crash reporting may use installation identifiers, device information, usage events and crash traces. Optional analytics and crash-report sending are disabled by default. You can opt in or withdraw in Settings. Accepting the License Agreement or account data processing does not enable this optional collection.

Our website uses essential cookies for login and language preferences. Where website analytics is enabled, its script loads after your consent, which you can change in the website’s analytics settings. That preference is stored for up to 180 days. Google Analytics user-level and event-level data is retained for up to 14 months, followed by its monthly deletion cycle. The retention period for user identifiers may restart when you use the service again. Standard aggregated reports are not subject to this setting and may remain longer.

6. Retention and deletion

• Account and cloud records are kept while needed for the service and deleted within one month of a verified deletion request, or sooner where required by law, subject to lawful exceptions.
• Our server logs are retained for up to one month. Specific incident or dispute records may be retained separately where legally necessary.
• Backup copies of deleted data expire within one month of a verified deletion request. Backups have restricted access; restored data must respect previous deletion requests.
• Minimum subscription and payment-verification records are retained while needed to administer a subscription, resolve refunds or disputes, and meet applicable tax, accounting and legal-claim retention periods. They are deleted or anonymized when these purposes and mandatory periods end.
• Minimal synchronization deletion markers are retained until needed synchronization and backup recovery windows end, to prevent deleted records from reappearing. Support correspondence is retained while handling your request and any related complaint or dispute, then deleted unless a legal obligation requires retention.
• Providers have separate retention cycles. Crashlytics starts deleting reports and associated identifiers after 90 days; our one-month server-log period does not apply to its records.

To request deletion of your CashCurator account without reinstalling the app:

1. Email info@chiefhead.com, preferably from the email address linked to your account. Use the subject “Delete CashCurator account” and say that you want your account and associated data deleted.
2. If needed, complete the account-ownership verification we request. Do not send passwords or sign-in codes. If you no longer have access to your account email, contact us for help verifying ownership.
3. We delete account and cloud data, including our backup copies of deleted data, within one month of a verified request, subject to the lawful retention exceptions listed above.

You can also delete your account from your profile in the app. Deletion clears core account data, your owned budgets, including shared budgets, and your entries in other users’ budgets. Other users’ own entries remain. Files are removed through a separate cleanup process within the deletion period above.

Deleting an account does not cancel a store subscription; cancel it separately through the store. Cancellation is not a condition for deleting your data.

7. Security and your rights

We use HTTPS, authentication and access controls. No system guarantees absolute security; this does not waive our legal duties. Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, withdraw consent and complain to a competent authority. Contact us using the address above. Withdrawal does not affect processing already lawfully performed.

CashCurator is intended for adults aged 18 or older. We do not knowingly collect children’s personal data. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

8. Updates

We publish updates on this page and provide notice or obtain fresh consent where required. This policy does not limit mandatory privacy or consumer rights. Service availability and permitted liability limitations are addressed in the License Agreement.