Privacy policy

The short version

• The app has no account and no Cashington server. Your ledger, your statements and your backups stay on your computer.
• Cashington, the person who makes it, never receives your transactions, balances, bank logins or bank credentials.
• The app sends nothing about you anywhere: no analytics, no tracking, no crash reports.
• Bank connections are optional and go through your own SimpleFIN or Plaid account, straight from your computer to that provider.
• This website sets no cookies and keeps only what you choose to type into its forms.

The Cashington app

What it keeps, and where. Everything the app knows is stored in one folder in your user profile on your computer (on Windows %LOCALAPPDATA%\Cashington, on a Mac ~/Library/Application Support/Cashington):

• your ledger: accounts, transactions, lines, rules, bills, income, balances, Net Worth and settings;
• copies of the statement files you import, so an import can be undone or redone;
• backups: a copy at each start and once a day, the newest 10 and 30 kept;
• the window's own settings, such as light or dark mode.

Nothing in that folder is sent to Cashington or to anyone else. Uninstalling the app leaves the folder in place, so your records are never lost by accident; Settings, Danger zone, Erase everything deletes it.

Encryption. The keys and tokens for bank connections are encrypted, with a key that only your operating-system sign-in can unlock (Windows Data Protection or the macOS Keychain). The ledger file itself is not encrypted: protect it the way you protect the rest of your computer, with a sign-in password and disk encryption (BitLocker on Windows, FileVault on a Mac).

What the app sends over the internet. Nothing, unless you turn on a bank connection. It has no analytics, no tracking, no advertising and no crash reporting, and it does not check a Cashington server for anything. Links in the app (the guides, What's new, feedback) open in your own web browser.

Bank connections (optional)

If you turn one on, you use your own account with a data provider: a SimpleFIN setup token, or your own Plaid developer keys. The app then talks directly from your computer to that provider, over an encrypted connection, and asks only for what a ledger needs: your accounts, their balances and their posted transactions. Cashington never sees, receives or stores your provider credentials or your bank data on any server, because there is no Cashington server.

Your use of SimpleFIN or Plaid is governed by your own agreement with them and by their privacy policies (SimpleFIN, Plaid). Disconnecting a bank in the app deletes its credentials from your computer and, for Plaid, asks Plaid to remove the connection.

Where you got the app

If you install Cashington from the Microsoft Store or download it from this site, the Store or the download host may record the download as it does for any app, under its own privacy policy. Cashington receives no personal information from either; at most, store reports show download counts.

This website

cashington.app sets no cookies, runs no analytics and loads nothing from other servers. It is hosted by Cloudflare, which processes the requests your browser sends, as any web host does. The site keeps only what you type into its forms:

• Waitlist: your email address, used for one email when Cashington is available, and never shared or sold.
• Feedback board: what you write, its kind (idea, problem or question) and, only if you give it, your email address so we can reply. Votes use a random token your browser keeps; it identifies no one.
• Reviews: your star rating and, only if you give them, a title, text, a display name, your platform and an email address.

Posts and reviews are read before anything is shown publicly. Email addresses are never shown or published. To limit spam, the site keeps a salted, one-way hash of your network address for one day, and then deletes it; it cannot be turned back into the address.

Your choices

• Delete everything the app keeps at any time: Settings, Danger zone, Erase everything (or remove the folder named above).
• Ask us to remove your waitlist address, a post, a review or an email address you left on this site, or to tell you what the site holds about you: write through the feedback page and say it is a privacy request, or email privacy@cashington.app. We answer within 30 days.

Children, changes and contact

Cashington is made for adults managing a household and is not directed at children under 13; the website does not knowingly collect anything from them.

If this policy changes, the new version will be posted here with its date, and a change that affects the app will be described in What's new.

Cashington is made by Pedram Jahangiry, in Utah, USA. Privacy questions: privacy@cashington.app.