Legal

Privacy Policy

Effective 18 October 2026

CashMitra ("the app", "we") is a personal expense tracker for Android. This policy explains what data the app collects, why, where it is stored, who it is shared with and how you can delete it. By using CashMitra you agree to this policy.

1. Data we collect

Account

• Your name, email address and, if you sign in with Google, your profile photo.
• Sign-in is handled by Firebase Authentication (email and password, or Google Sign-In). We never see your password.

What you enter

• Settings: country, home currency, the day your month starts, monthly budget and theme.
• Entries: amounts, currencies, exchange rates, dates, notes and categories of money you spent or received, and money lent to, borrowed from or repaid by people you add.
• People: the names you give them and the running balance with each.
• Your CashMitra ID, a short code other users can use to add you as a friend.

Split groups

• When you create or join a split group, the group name, its members' names and CashMitra IDs, the shared expenses and settlements, and each member's balance are visible to every member of that group.

Bank alerts (optional, off by default)

• If you turn on Bank alerts and grant Android's notification access, CashMitra reads incoming notifications from the SMS app and from the bank or wallet apps you choose, to spot payment alerts.
• This happens entirely on your device. Message text, sender numbers and pending suggestions are kept in the app's private storage on your phone, are removed after 30 days, and are never uploaded.
• Only when you tap Save on a suggestion does an entry (amount, currency, date, a short title such as the merchant name and your category) get saved to your account, exactly like an entry you typed.
• Notifications from chat, email, social and calling apps are ignored. You can turn the feature off or revoke notification access at any time.

Mitra AI (optional)

• Mitra AI only runs when you ask it a question. Your question, the recent messages in that chat and a short summary of your own ledger (this month's totals and categories, last month's total, balances with people and your latest entries) are sent through our server to OpenAI to write the answer.
• We don't store the chat. We keep only how many questions you asked today, to apply the daily limit.
• Under OpenAI's API terms, data sent through the API is not used to train their models.

Premium payments

• CashMitra Premium is paid through Google Play. Your card or wallet details go to Google, never to us.
• We keep your plan (monthly or yearly), its status, Google Play's purchase reference and the dates it is paid until, so we can turn Premium on and off. We send Google Play your CashMitra account ID with the purchase, so it is linked to the right account.

Advertising and device data

• CashMitra shows ads through Google AdMob. AdMob may collect your device's advertising ID, IP address, approximate location, device and app information, and ad interactions to show, measure and (where you allow it) personalise ads.
• In the EEA, UK and Switzerland we ask for your consent first using Google's consent form. You can change your choice any time in More → Ad privacy. You can also reset or delete your advertising ID in Android settings.
• See how Google uses data from apps that use its services.

2. How we use it

• To run the app: show your balances, budgets, reports and history across your devices.
• To let you split costs and settle up with friends who also use CashMitra.
• To suggest entries from your bank alerts (on device only, as described above).
• To show ads that keep the app free, and to run Premium for people who pay for it.

We do not sell your personal data, and we do not use your financial entries for advertising.

3. Where it is stored and who it is shared with

Data is sent over encrypted connections (HTTPS/TLS) and stored by Google, which may process it outside your country. Firestore security rules let only you read your own data, and only group members read a group. We may disclose data if required by law.

4. Exports

When you export a monthly report, the Excel file is created on your phone and shared only where you choose to send it.

5. Keeping and deleting your data

• We keep your data while your account exists.
• Delete it yourself: in the app go to More → Delete account. This permanently deletes your account, entries, people, categories and CashMitra ID, replaces your name with "Deleted user" in your split groups and clears bank-alert data on the phone. See Delete your account.
• Shared expenses already recorded in your split groups stay visible to the other members (under "Deleted user"), so their balances stay correct.
• Deleting your account cancels a Premium subscription. Records of past payments (plan, dates and Google Play references, without card details) are kept as long as the law requires for accounting.
• Data held by Google for ads follows Google's privacy policy.

6. Your rights

Depending on where you live (for example under the GDPR), you may have the right to access, correct, export or delete your data, and to object to or withdraw consent for its processing. Most of this you can do in the app; for anything else, email us and we will reply within 30 days.

7. Children

CashMitra is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

8. Permissions the app asks for

• Notifications: to show reminders and bank-alert suggestions.
• Notification access (only if you turn on Bank alerts): to read payment alerts as described above.
• Internet: to sync your data and load ads.

9. Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app.

10. Contact

Questions or requests: abdullah.s7062@gmail.com