プライバシーポリシー

When you create an account with email and password, we collect your email address and password. You may also choose to sign in with Google: in that case Google shares your name, email address, and profile picture with us so we can create and identify your account. We do not receive your Google password. All authentication — both email/password and Google Sign-In — is handled on our behalf by Supabase, our authentication and database provider, which securely manages your credentials and login sessions. When you use the Service, we store the financial records you enter: transactions, categories, notes, amounts, and dates. We do not collect sensitive financial information such as bank account numbers, credit card numbers, or tax identification numbers. If you use the receipt scanning feature in the Whisper AI assistant, images you select are transmitted to our AI inference provider for analysis and are not stored by Cash Whisper after the session ends.

We use the information we collect to provide and operate the Service, power the AI Whisper assistant to answer your financial questions and analyse receipt photos you upload, process subscription payments via Stripe, send transactional emails (account verification, billing receipts), and improve the Service through aggregate, anonymized usage analytics.

We do not sell your personal or financial data. We share data only with third-party service providers necessary to operate the Service: Supabase for authentication (including Google Sign-In) and database hosting; Google for the optional "Sign in with Google" login, where Google provides your name, email, and profile picture to identify your account; Stripe for payment processing; and OpenRouter for AI inference powering the Whisper assistant (OpenRouter routes requests to underlying AI model providers, currently Google and OpenAI). When you upload a receipt image, that image is transmitted to OpenRouter and the underlying AI provider for analysis. If you consent to optional cookies, we additionally share usage and device data with Google Analytics 4 for analytics and with Meta for advertising measurement (see the Cookies section); we never share your financial records with these or any other advertiser. Each provider is bound by their own privacy policies and data processing agreements.

When you invite someone to your household, they gain access to all transactions recorded within that household. You are responsible for managing who has access to your household. You can remove members at any time from your household settings.

We retain your data as long as your account is active. If you delete your account, we will permanently delete your personal data and transaction history within 30 days, except where retention is required by law (e.g., billing records). Whisper conversation sessions are held for up to 30 minutes of inactivity and automatically cleared — they are never stored long-term. Receipt images you upload are transmitted to our AI provider in real-time for analysis only; Cash Whisper does not store these images.

We use industry-standard security measures including encryption in transit (HTTPS/TLS) and at rest. Authentication is managed by Supabase, which provides secure, token-based sessions. Despite our best efforts, no system is completely secure — please use a strong, unique password.

The Whisper AI assistant includes an optional receipt scanner. When you tap the camera icon, your browser opens your device's native file picker — no Camera or Photo Library permission is requested by Cash Whisper itself. Your device's operating system or browser may display its own permission prompt the first time you access your photo library or camera through the file picker; this is controlled entirely by your device, not by us. You can decline or revoke this access at any time in your device settings without affecting any other part of the Service.

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and export your data in a portable format. To exercise any of these rights, contact us at privacy@cash-whisper.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The last updated date at the top of this page reflects the most recent revision.

We use a small number of cookies to operate the Service. Necessary cookies (authentication session, display-theme preference) are always active because the Service cannot function without them. If you choose to accept optional cookies, we also set: Analytics cookies via Google Analytics 4, which collect anonymous, aggregated data about page visits to help us improve the product; and Marketing cookies via Meta Pixel, which measure the effectiveness of our advertising so we can reach users who would benefit from Cash Whisper. You can accept, reject, or change your cookie preferences at any time using the "Cookie preferences" link in the footer. Your choice is stored for one year.

For privacy-related questions, reach us at privacy@cash-whisper.com.