Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains what information CashLedger ("CashLedger", "we", "us") collects, how we use it, and the choices you have. CashLedger is a personal and family expense-tracking application available at cashledger.chaitanyalakamsani.com. By creating an account or using the application, you agree to this policy.

1. Information you provide

When you register and use CashLedger, you provide:

Account details — your email address, first and last name (optional), an optional phone number, and a password. Passwords are handled and stored by our authentication provider (Supabase Auth) as salted hashes; we never see your plaintext password.
Profile picture — an avatar image, if you choose to upload one.
Financial records you enter — transactions (amount, date and time, type, description, notes, classification), categories and subcategories, merchants, accounts (including a name, opening balance and, if you enter one, an institution name and a masked account number), payment modes, tags, locations, and budgets.
Family workspace data — a family/workspace name, its membership, and invitations you send (the invited email address and an invitation token).
Preferences — theme, currency, timezone, default account and payment mode, and your favorite categories/subcategories.
Saved searches — filters you choose to save.

2. Information from Google Sign-In

If you choose "Continue with Google", Google shares your email address and basic profile information with us so we can create or access your account. We do not receive your Google password.

3. Information collected automatically

Authentication & session data — session cookies set by Supabase Auth to keep you signed in, and the time of your most recent sign-in.
Usage analytics — we use Google Analytics 4 to understand aggregate, de-identified usage (such as pages viewed and general device/browser type). Google Analytics sets its own cookies. See "Cookies" below.
Server logs — our hosting provider (Vercel) processes standard request information (such as IP address and user-agent) to serve and secure the application.

4. How we use your information

To provide the application — authenticate you and store and display your records.
To enable family sharing — members of your family workspace can view shared records.
To generate the reports, analytics and exports you request.
To secure the service — including rate limiting and abuse prevention.
To understand and improve aggregate usage via analytics.

We do not sell your personal information, and we do not use your financial records for advertising.

5. Family workspaces and sharing

CashLedger is designed for shared use within a family workspace. Records you add to a family are visible to other members of that family. The workspace Owner can manage the family's shared data and membership. Only share a workspace with people you trust.

6. Service providers

We rely on the following providers to run CashLedger:

Supabase — database, authentication, and file storage (your account, financial records, and avatar images).
Vercel — application hosting and delivery.
Google — Google Sign-In (optional authentication) and Google Analytics (usage analytics).
Cloudflare — DNS for our domain.

These providers process data on our behalf under their own terms and privacy policies.

7. Cookies

Essential — Supabase Auth session cookies (to keep you signed in) and a preference cookie that remembers your light/dark theme. The application cannot function without the session cookies.
Analytics — Google Analytics 4 cookies used to measure aggregate usage.

8. Data retention

We retain your information while your account remains active. When you delete a record, it is soft-deleted — hidden from the application but retained in the database so financial history is not lost accidentally. Certain information may be retained for operational, security, backup, or legal reasons. The application does not currently implement an automatic retention or deletion schedule. You can export your data at any time (see below).

9. Your choices and rights

Access & portability — you can export your transactions and related data at any time as CSV, Excel, or PDF from within the application.
Correction — you can edit your profile, preferences, and records directly in the application.
Deletion — the application does not yet offer self-service account deletion. To request deletion of your account and associated data, contact us at the address below.

10. Security

Data is transmitted over HTTPS. Access to your family's data is enforced at the database level by row-level security, so one family cannot access another's data. We apply a Content Security Policy, application-level rate limiting, and validation of uploaded images. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

11. International processing

Your data is stored and processed by our providers (Supabase and Vercel) in the region configured for the service. By using CashLedger, you consent to this processing.

12. Children

CashLedger is not directed to children, and we do not knowingly collect information from children. If you believe a child has provided us data, contact us and we will remove it.

13. Changes to this policy

We may update this policy as the application evolves. Material changes will be reflected by updating the "Last updated" date at the top of this page.

14. Contact

Questions or requests: hello@chaitanyalakamsani.com.