Summary
Cashflow Pilot is local-first and does not require a bank login, cloud account, or advertising identifier. Your imported statements, transactions, budgets, forecasts, goals, and settings stay on your device or in your browser by default. If you choose optional Cloud Sync or other account features, the data needed to provide those features may be transmitted to and stored by Cashflow Pilot's cloud services.
- No bank credentials: Cashflow Pilot does not ask for online banking usernames, passwords, or MFA codes.
- No selling data: We do not sell financial data or use it for advertising.
- Cloud features are opt-in: Local-first use does not require Cloud Sync. Other than the limited analytics and ordinary hosting data described below, financial records are not sent to Cashflow Pilot unless you enable a cloud feature or choose to export, back up, share, or send them.
Data stored locally
The app may store information you enter or import, including account names, statement rows, merchant descriptions, categories, budgets, recurring items, goals, debts, forecast settings, app preferences, and local diagnostic/export files.
On iOS, app data may be stored in local app storage such as SQLite. On the web, app data may be stored in browser storage. Clearing app data, deleting the app, clearing browser storage, or changing devices may remove local records unless you created a backup.
Statement imports and files
When you import a statement export, Cashflow Pilot processes it so you can review transactions and build local reports. Imported files and parsed rows are not uploaded to us automatically.
If you choose to send a screenshot, CSV, diagnostic export, or backup to support, that material may contain financial or personal information. Only send files you are comfortable sharing.
Data we collect
Cashflow Pilot is designed not to collect advertising or cross-site tracking data. Local financial records stay on your device by default. If you enable optional account or Cloud Sync features, Cashflow Pilot may process the account identifiers, authentication metadata, and app data needed to provide the feature. The iOS app may also send limited Firebase Analytics events so we can understand basic app usage and screen navigation.
We may receive limited information in these cases:
- Cloud account and sync: If you enable an account or Cloud Sync, information required to authenticate you and provide the enabled cloud feature may be transmitted to and stored by Cashflow Pilot's cloud services. Cloud data is separate from the local device copy.
- Optional third-party financial connections: If you explicitly connect SimpleFIN, Lunch Flow or another supported provider, Cashflow Pilot may relay provider access credentials and requested account/transaction/holding data through its authenticated API to retrieve the information you requested. These requests are separate from ordinary Cloud Sync; third-party providers have their own privacy practices and terms. Optional connection credentials are intended to remain session-only or stored in the separate encrypted device vault when you choose that option, rather than ordinary Cloud Sync records.
- Newsletter communications: If you explicitly opt in to marketing emails, Cashflow Pilot may share your email address and subscription preferences with Brevo for subscriber and campaign management. Signing in does not subscribe you to newsletters, and you can opt out.
- Support email: If you email support, we receive your email address, message, attachments, and any details you choose to include.
- App analytics: Firebase Analytics may receive limited events such as app opened, screen viewed, app version, platform, tab, and screen name. We do not send balances, transactions, merchant names, account names, statement contents, budgets, goals, debts, search text, imported files, or other user-entered financial details.
- Website hosting: Our website host may process ordinary web request information, such as IP address, browser details, requested URLs, and timestamps, to deliver and protect the site.
- App platform services: Apple or your device platform may process information related to app downloads, purchases, crash reporting, backups, or operating-system services according to their own policies and settings.
Tracking, ads, and third parties
Cashflow Pilot does not use third-party advertising SDKs, does not track you across apps or websites for advertising, and does not sell personal information.
Firebase Analytics is used only for limited product usage metrics in the iOS app. It is not used to collect financial records or to track you across other companies' apps or websites.
Optional provider connections send the requested data through the service needed to retrieve it; availability and credential handling vary by provider. Connection data is not automatically the same as Cloud Sync data. Product-news subscriptions require a separate opt-in. Marketing campaigns are managed through Brevo, independently of essential account emails.
Optional cloud account and sync features are covered by this policy. If Cashflow Pilot later adds materially different uses of personal information, advertising, or broader tracking, this policy and applicable app-store privacy disclosures will be updated before those practices are introduced.
Retention and deletion
Local app data remains on your device until you delete it, reset local data in the app, clear browser storage, uninstall the app, or restore from a different backup. We cannot recover or delete data that exists only in your local browser or device storage.
If you enable a Cashflow cloud account, the account settings provide a server-side deletion path for account and cloud data. Support emails are retained only as long as reasonably needed to respond, troubleshoot, maintain records, or comply with legal obligations. You can request deletion of support emails or attachments by contacting us, subject to records we may be required or reasonably need to retain.
Encryption & safeguards
Local data: Cashflow Pilot stores local-only records in browser storage on the web and local app storage such as SQLite on iOS. The protection of those local copies depends in part on the security safeguards provided by your device, operating system, browser, device passcode, and backup settings. Unless a feature specifically says otherwise, do not assume that local browser or SQLite records have a separate Cashflow Pilot application-level encryption layer beyond those platform protections.
Cloud data at rest: Cashflow Pilot uses Cloudflare D1 for supported cloud database features. Cloudflare states that all D1 objects, including live databases, inactive databases, and metadata, are automatically encrypted at rest using AES-256, with GCM as the preferred mode.
Data in transit: Cashflow Pilot uses HTTPS/TLS for traffic to its hosted website and cloud APIs. Cloudflare states that transfers between Workers and D1, between Cloudflare network nodes and D1, and D1 API access are protected with TLS/SSL.
Exports and backups: Files you export or download may be readable outside Cashflow Pilot. Store them securely and use device or storage encryption appropriate for financial information.
Security
Cashflow Pilot minimizes server-side exposure by keeping financial records local by default and uses safeguards appropriate to the features you choose. No storage or transmission method can be guaranteed to be completely secure.
You are responsible for protecting your device, device passcode, browser profile, iCloud/device backups, and any exported files you create. Before sharing exports or backups, review them for personal or financial information.
Your rights under PIPEDA
Where the Personal Information Protection and Electronic Documents Act (PIPEDA) applies, you have rights concerning personal information that Cashflow Pilot holds about you. Data stored only on your device is already under your direct control and is not available to us.
- Access: You may ask whether we hold personal information about you and request access to it, subject to limited exceptions permitted by law.
- Use and disclosure: You may ask how personal information we hold has been used and, where applicable, to whom it has been disclosed.
- Correction: You may challenge the accuracy or completeness of personal information we hold and ask us to correct or amend it where appropriate.
- Challenge compliance: You may raise a privacy concern or challenge our compliance with applicable privacy principles. If a concern is not resolved, you may have the right to complain to the Office of the Privacy Commissioner of Canada.
To make an access, correction, or privacy request, email [email protected]. We may need to verify your identity before disclosing or changing personal information. PIPEDA access requests are generally answered within 30 days, subject to lawful extensions and exceptions.
Children
Cashflow Pilot is not intended for children. We do not knowingly collect personal information from children through the app.
Changes
We may update this policy as the app changes. The updated version will be posted on this page with a new last-updated date.
Contact
For access, correction, or privacy requests, questions about cloud data or deletion, and support requests, contact: