CashFlow Ledger
Privacy Policy
CashFlow Ledger is an offline-first household finance application for Android. This Privacy Policy explains how the application handles information when you use it and when you choose to connect it to Google Drive.
1. Information stored on your device
CashFlow Ledger stores your household ledger and related records on your Android device. This may include accounts, transactions, budgets, notes, imported financial data, receipt information, review records, and other content that you enter or import.
The application protects its local database using encrypted application storage and Android-protected key storage. CashFlow Ledger does not send this local information to a CashFlow Ledger-operated server.
2. Optional Google Drive access
Google Drive access is optional. It is used only after you choose Settings → Google Drive sync → Connect in the Android application and complete Google’s authorization flow.
The application requests Google’s drive.file permission. This permission is used to create or reuse the application-managed CashFlow Ledger folder and to work with files created or opened by the application through that authorization. CashFlow Ledger does not use this permission to read unrelated files in your Google Drive.
When synchronization is enabled, the application uses Google Drive to:
- create or reuse its application-managed CashFlow Ledger folder;
- upload encrypted household synchronization bundles; and
- download those bundles to synchronize the household’s authorized devices.
3. Google account information
The application checks the email address of the Google account that authorizes Drive access so it can bind the household to the intended Drive account. The account binding and Drive folder identifier are stored locally in the application’s protected storage.
Google access tokens are held in memory while needed for a session. CashFlow Ledger does not write bearer access tokens or refresh tokens to its database, files, synchronization bundles, or logs.
Google processes authorization and Drive data under Google’s own terms and privacy policies. You can review or revoke CashFlow Ledger’s access in your Google Account security settings or by using the application’s Disconnect action.
4. Information shared and disclosure
CashFlow Ledger does not operate an advertising network, data-broker service, or CashFlow Ledger cloud account. We do not sell or rent your information. Information remains on your device and, when you enable synchronization, in the Google Drive account you authorize.
The application may disclose information when required by law, legal process, or to protect the rights, safety, and security of users or the application.
5. Retention and deletion
You control the ledger content stored on your device and the synchronization bundles stored in your Google Drive. Disconnecting Google Drive revokes authorization and removes the local connection state; it does not automatically delete files already stored in Google Drive.
You may delete application-managed files from Google Drive and delete local application data using Android’s device settings. Deleting the application or its local data does not automatically delete files in Google Drive.
6. Security
CashFlow Ledger uses Android-protected local key storage and encrypted local application storage. No security method is perfect. Keep your Android device, operating system, Google Account, and device unlock method secure.
7. Children’s privacy
CashFlow Ledger is not directed to children under 13, and we do not knowingly collect personal information from children through a CashFlow Ledger service.
8. Changes to this policy
We may update this policy when the application’s data practices change. The current version will be available at this URL, with its effective date shown above.
9. Contact
For privacy or data-use questions, contact cashfledger@gmail.com.