Who is responsible
Cashli and cashli.app are operated by Vitalii Kozachenko, the controller of the personal information described here. For privacy questions or requests, contact info@cashli.app.
This policy covers the Cashli website and mobile app. Store availability is shown on the website; a product preview is not a live store listing.
Your account and records
You can keep a personal ledger on your device without an account. When you create an account, we process your name, email address, password hash, account identifier, optional username and profile photo. Your email is used as a sign-in identifier; Cashli does not represent an unverified email address as verified. A recovery code allows you to reset your password.
When signed in, your ledger is synchronized to your account. It may include income, expenses, categories, manually entered balances, savings, investment values, recurring entries, notes, receipt details and shared debts. Cashli does not connect to your bank or collect bank passwords or payment-card details.
Friends and shared bills
Your name, optional username and profile photo help other Cashli users find you. Friend connections form a social graph within Cashli; we do not upload your device address book. Friend requests and event invitations require acceptance.
When you create or join a shared bill or event, its participants can see its members, expense descriptions, amounts, assigned items, notes and repayment records. Your private ledger is not made visible merely because someone is a friend. Share only information you are entitled to share. Other people may retain records or screenshots they have already received.
Photos and device permissions
Cashli asks for camera access only when you choose to take a photo and reads photos you select. Receipt text recognition on iPhone uses Apple Vision on the device. Original receipt photos are not included in ordinary ledger synchronization; confirmed receipt text and amounts may be synchronized or shared when you save them.
An optional server receipt-reading feature, where available, sends a normalized receipt image only after an explicit confirmation in the app. Server receipt images and extraction results expire after 24 hours. They are not used to train models. Cashli does not send receipt images to an advertising service or silently fall back to a third-party cloud AI.
Optional Face ID or Touch ID uses the operating system: Cashli receives an authentication result, not your biometric template. Nearby discovery uses Bluetooth with permission, and the shake interaction uses motion data locally. We do not collect GPS location, microphone recordings or biometric data.
Why we use information
We use account and financial records to provide the features you request, synchronize your ledger, calculate shares, and handle support. Where applicable, this is necessary to perform our agreement with you. We use limited technical information to secure and operate the service based on our legitimate interests in preventing abuse and maintaining reliability. Optional device permissions and optional receipt uploads are your choices, which you can withdraw for future processing. We may retain information when required by law.
Cashli does not sell personal information, use it for cross-app advertising, or include advertising or behavioral analytics SDKs. Calculations do not make automated decisions about lending, insurance, employment or access to financial products.
Providers and security
The Cashli website and account service are hosted on a Hostinger VPS in Manchester, United Kingdom. Hosting providers process infrastructure information to deliver and protect the service. Internet requests expose technical information such as IP address and request time. Cashli uses HTTPS, access controls and encrypted application records. Server-side encryption is not end-to-end encryption: the service can decrypt records to provide its features.
Support messages are handled through the email provider for info@cashli.app. If you enable system notifications when available, Apple and Expo process device delivery tokens and notification content. Lock-screen notifications may show event names and amounts; you can disable them in device settings. Apple also processes App Store downloads under its own privacy policy.
Providers may process information outside your country. Where legally required, international transfers use an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards relevant to your request.
Retention and deletion
Device-only data remains on your device until you delete it. Account data is retained while you use the account. In Cashli, open My account → Delete account to request permanent deletion of the account and its server data; deleting only local data does not delete the server account. You can also contact info@cashli.app for help. We may need to verify that a request comes from the account holder.
Shared records already held by other participants may remain necessary for their own records; account identifiers and profile information are removed or anonymized when the account is deleted. Server backups rotate and may retain deleted records for up to 30 days, with access restricted to recovery. Temporary server receipt jobs expire after 24 hours. Security logs are kept for up to 14 days unless needed to investigate an incident. Support correspondence is kept only as long as needed to resolve the request and related legal obligations.
Exported JSON files are unencrypted files under your control. Store and share them carefully. Device encryption keys do not provide cross-device recovery; keep an export of important records.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to processing, and withdraw consent. You can edit your profile, export your ledger, manage permissions and delete your account in the app. Send other requests to info@cashli.app. You may also complain to your local data protection authority. Cashli is not intended for children under 13; contact us if you believe a child has supplied personal information.
The website
Website demos use fictitious data in page memory. They do not read your ledger or create an account. The contact form prepares a draft in your email app; Cashli receives it only if you choose to send it. No form content is saved by the website.
The site does not set cookies or load advertising trackers, analytics, external fonts or social embeds. Saving cookie settings stores an acknowledgement in your browser for 180 days. See the Cookie Policy. Material changes to this policy will be reflected here and, where required, brought to your attention in the app.