Your data, treated with restraint and clarity

Effective date: 07 April 2026

1. What We Collect

Cash Flow Lens may collect your account email address, a profile name you choose to provide, your device’s Firebase Cloud Messaging token for notifications, subscription status information, and anonymous product analytics about app performance and screen usage. We use this information to provide customer support, deliver service notifications, improve product quality, and manage access to paid features. We do not collect the body of your SMS messages as part of our cloud account services.

2. What We Never Collect

Cash Flow Lens does not collect or transmit your SMS text content to our servers, does not request or store your M-PESA PIN, does not collect your transaction amounts from SMS for server-side processing, and does not collect your precise location, contact list, or unrelated device content. Sensitive financial parsing is designed to happen locally on your device whenever possible.

3. Data Storage

Your detailed financial data is intended to remain on your device in local storage, including SQLite-based storage used by the mobile application. That data is not transmitted to Cash Flow Lens servers as part of normal application use. Server-side systems are used only for account, subscription, support, notification, and administrative functions. We apply reasonable technical and organizational safeguards to the limited cloud data we do process.

4. Third-Party Services

Cash Flow Lens uses third-party service providers including Firebase for authentication, messaging, analytics support, and secure application operations; RevenueCat for subscription management workflows where applicable; and Google Play Billing for in-app billing and subscription renewals. These providers may process limited account or technical data according to their own privacy policies and contractual obligations.

5. Data Retention

We retain account and support data only for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. If you request account deletion, we aim to remove or anonymize associated account data within 30 days, except where retention is required by law or for legitimate security and fraud-prevention purposes.

6. Children’s Privacy

Cash Flow Lens is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that a child has submitted personal information to us without appropriate authority, we will take reasonable steps to delete that information promptly.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or operational improvements. When we make material updates, we will revise the effective date of the policy and may provide additional notice through the website, application, or email where appropriate. Continued use of Cash Flow Lens after changes take effect constitutes acceptance of the updated policy.

8. Contact

If you have questions about this Privacy Policy, data handling practices, or privacy requests, please contact us at privacy@Cash Flow Lens.app. We will make reasonable efforts to respond in a timely manner.