Privacy Policy
Last updated: September 4, 2026
Cajeput ("we", "us", or "our") respects and protects your personal privacy. This Privacy Policy outlines how your personal data is collected, used, processed, and safeguarded when using the Cajeput mobile application and website ("Service").
1. Our Core Privacy Principles
- Zero Data Selling & Strict Privacy: We NEVER sell your data to third parties, and NEVER track your activity for third-party advertising networks.
- Collaborative Financial Privacy (Financial Intimacy): Your transaction records and financial logs are accessible strictly by you and the partner or family members you explicitly invite into your shared cash books.
- Global Privacy Compliance: We uphold universal data rights including full data access, portability, correction, consent withdrawal, and instant account deletion (compliant with UU PDP, GDPR, CCPA/CPRA, and LGPD).
2. Information We Collect
- Account & Profile Data: Email address for authentication and recovery, display name shown to shared members, optional avatar photo, and regional/currency preferences.
- Financial & Collaborative Logs: Transaction amounts, expense/income categories, notes/descriptions, dates, payment methods, in-context comments, and attached receipt photos or voice notes you choose to upload.
- Technical & Diagnostic Telemetry: Device notification tokens for push alerts, device model and OS version for session security, and aggregated crash telemetry to fix technical issues (without financial amounts).
3. How We Use Your Data
- Core Operations: Maintaining shared books, updating balances, generating financial activity feeds, and displaying analytical overviews.
- Collaboration: Facilitating secure data sharing between you and your invited members.
- Critical Notifications: Delivering timely push alerts for new entries, comments, and book invitations.
- System Security & Reliability: Preventing unauthorized access, debugging issues, and ensuring continuous platform availability.
4. Data Sharing & Third-Party Service Providers
- We NEVER sell, rent, or trade your personal data to data brokers or advertisers.
- We NEVER share your data for third-party marketing or cross-context tracking.
- Data is processed solely with trusted, enterprise-grade cloud service providers bound by strict confidentiality and data protection agreements:
- Encrypted Cloud & Database Infrastructure: To securely store and manage encrypted account data, financial records, and attachments.
- Official App Store Billing Processors: To validate official subscription transactions via Apple In-App Purchases and Google Play Billing.
- Push Notification Gateways: To deliver real-time push alerts to your device.
- Aggregated Diagnostics & Performance Telemetry: To monitor system uptime and error logs without exposing financial amounts.
5. Data Security
- Multi-Layered Access Controls: Transaction data is restricted strictly to authorized members invited into that specific cash book.
- Encryption in Transit & at Rest: All communications between the app and servers use industry-standard HTTPS/TLS encryption. Session tokens reside in secure hardware storage on your device.
- Protected File Storage: Attached receipt images and voice notes are stored securely in private cloud storage with strict access controls.
6. Your Privacy Rights & International Compliance
Self-Service Data Access & Export
- "Export My Data" in Settings enables you to download a complete copy of your personal data in standard machine-readable JSON format.
- Available free across all tiers without paywalls (rate-limited to 1 request per 24 hours to prevent abuse).
Instant Account Deletion (Right to Erasure)
- "Delete Account" in Settings allows you to permanently delete your account and credentials immediately upon explicit confirmation without a grace period.
- Important: Deleting your in-app account does not automatically cancel active subscriptions in the Apple App Store or Google Play Store. You must manage store subscriptions directly in your Apple ID or Google Play settings.
Global Privacy Rights
- EU/EEA & UK (GDPR): Right of Access (Art. 15), Right to Erasure (Art. 17), Right to Data Portability (Art. 20), and restriction of processing. Cross-border transfers are protected by Standard Contractual Clauses (SCCs).
- United States (CCPA/CPRA California & US State Laws): Cajeput DOES NOT SELL OR SHARE personal information for targeted advertising. Privacy rights are honored without discrimination.
- Brazil (LGPD): Guarantees confirmation, access, correction, anonymization, and free data portability rights.
- Indonesia (UU PDP): Fully guarantees all personal data subject rights under Law No. 27 of 2022.
7. Data Retention
| Data Category | Retention Period |
|---|---|
| Active Account Data | Duration of active account lifecycle |
| Shared Book Transactions | Duration of active shared book (anonymized if creator deletes account) |
| Diagnostic & Error Logs | Purged according to standard retention cycles (maximum 90 days) |
| Aggregated Telemetry | Cleaned periodically under data minimization principles |
8. Children's Privacy
Cajeput is designed for adult couples and families managing household finances. We do not knowingly collect or process personal data from minors.
9. Contact Us
For inquiries regarding this Privacy Policy or to exercise your data rights, please contact:
- Email: yushraalabs@gmail.com
- Official Website: https://cajeput.app/privacy-policy.html