Privacy Policy
Last updated: 16 October 2026
CashflowLy is a personal income and expense tracker. This policy explains what data the app handles and where it goes. We have kept it short and plain.
Your financial data stays on your phone
Your wallets, transactions, categories, budgets, recurring payments and notes are stored only in a database on your device. We do not run a server, there is no account, and we cannot see this data.
- App lock. If you set a PIN, only a salted hash of it is kept, in Android's secure storage.
- Backups. A backup is a file that you choose to save, and you choose where it goes. We never receive it. Android cloud backup is turned off for this app.
- Deleting your data. Clearing the app's data or uninstalling the app deletes everything stored on the device.
Usage analytics (Mixpanel)
To understand which features are used, the app sends anonymous usage events to Mixpanel, an analytics service. Mixpanel stores these events on servers in the European Union.
What is sent:
- Event names, such as "transaction added" or "screen opened"
- Simple details, such as whether an entry was an income or an expense, and the currency you picked during setup
- Basic device information: phone model, Android version, app version, screen size and network type
- A random identifier created by the app
- An approximate location (country and city), which Mixpanel works out from your internet connection
What is never sent: amounts, balances, notes, wallet or category names, your name, chat messages or API keys.
Turning it off: you can turn analytics off at any time in Settings → Configuration → "Share usage analytics".
AI assistant (optional)
The AI assistant works only if you add your own API key for Google Gemini or Z.ai (GLM). When you send a chat message, the app sends it directly from your phone to the provider you picked. The request includes:
- your message and the recent conversation
- your name, if you entered one in the app
- your currency, and today's date and time
- the names and balances of your wallets, and the names of your categories and income sources
- any transactions the assistant looks up to answer you, such as amounts, dates, categories and notes
That provider handles this data under its own terms and privacy policy: Google, Z.ai.
Your API key is stored in Android's secure storage on your device and is sent only to that provider. If you never add a key, nothing is sent to any AI service.
Other things you should know
- All network traffic uses encrypted connections (HTTPS).
- The app shows no ads and does not use the advertising ID.
- The app does not ask for your location, contacts, camera or files. When you save or restore a backup, you pick the file yourself.
- The app is not meant for children under 13.
Contact and deletion requests
If you have questions, or want your analytics data deleted, email dev@arifcodes.com.
If this policy changes, we will update the date at the top.