Privacy Policy

This policy explains what data cashme collects when you use the app and website at usecashme.com, why we collect it, who we share it with, and how you control it.

1. What we collect

You give us

• Phone number — for account creation and SMS verification.
• Full name — shown to people you transact with.
• $cashtag — your public handle, visible to anyone who has it.
• PIN — stored only as a one-way Argon2id hash; we never see the raw PIN.
• Optional notes on transfers — e.g. “for jollof”; visible to the other party and on shared receipts.
• Support correspondence — when you email us.

Generated by you using cashme

• Transaction records (amount, time, counterparty, status).
• Top-up and cash-out records from our payment partner.
• Device and session information (IP, user-agent, login times) for security.

From third parties

• Firebase Phone Auth — verifies you control the phone number you signed up with.
• Paystack — processes MoMo top-ups and cash-outs and gives us status callbacks.

2. Why we collect it

• To run cashme — open accounts, move money, show balances and history.
• To keep you safe — detect fraud, lock down compromised accounts, comply with anti-money-laundering rules.
• To improve the product — aggregate, anonymised analytics on usage.
• To support you — answer questions, fix problems, respond to disputes.
• To meet legal obligations — Bank of Ghana reporting, tax reporting, lawful court orders.

3. Who we share it with

We do not sell your data. We share only what’s needed, with:

• Our payment partner (Paystack) — to process top-ups, send payouts, and reconcile transactions.
• Our authentication partner (Firebase / Google) — to verify phone numbers via SMS.
• Our cloud infrastructure provider (AWS) — to host the database and the API.
• Law enforcement and regulators — when legally compelled (court order, subpoena, regulatory direction).
• People you transact with — your name, $cashtag, and any note on a transfer are visible to the other side.

4. Public information

Some information is intentionally public:

• Your $cashtag profile at usecashme.com/u/<cashtag> — your name and cashtag, no balance or history.
• A shared receipt at usecashme.com/r/<id> — only when you actively share a specific transfer’s link. It shows sender name, recipient name, cashtags, amount, note, and time. It never shows phone numbers, balances, or anything else.

5. How we protect it

• All traffic is HTTPS-only.
• PINs are stored as Argon2id hashes, never plaintext.
• Sessions use httpOnly, signed cookies; rotated refresh tokens.
• Phone-verified signup, step-up PIN confirmation for large transfers, progressive lockout on failed attempts.
• Database access is restricted to a small set of engineers and audited.

6. How long we keep it

We keep account and transaction records for as long as your account is open, plus a regulatory retention period after closure (typically 5 years for financial records under Ghanaian law). Support emails are kept for up to 2 years unless you ask us to delete them sooner.

7. Your rights

• See what we have on you — email hello@usecashme.com and we’ll send you an export.
• Correct inaccurate data — most things are editable in the app; otherwise email us.
• Close your account — see Section 7 of the Terms.
• Object to specific processing — email us with the details.

Ghanaian users have rights under the Data Protection Act, 2012 (Act 843). EU/UK users transacting with cashme also have GDPR rights; we honour them on request.

8. Children

cashme is not for anyone under 18. If we discover an account belongs to a minor, we’ll close it and refund any balance.

9. International transfers

Some of our infrastructure runs outside Ghana (AWS, Firebase, Paystack). When data leaves Ghana it does so under the contractual safeguards required by the Data Protection Act.

10. Changes

If we change this policy materially we’ll notify you in the app or by SMS. The “Last updated” date at the top of this page always reflects the most recent change.

11. Contact

Privacy questions, data-access requests, complaints: hello@usecashme.com.