Privacy Policy
Short version: Cashleaf does not collect, transmit or sell any personal data. Everything you enter is stored only on your iPhone. The app contains no networking code, no analytics SDK, no advertising SDK and no tracking technology of any kind.
1. Who we are
Cashleaf ("the app") is published by Shenzhen Lichuang Zhiwei Technology Co., Ltd ("we", "us"). You can reach us at zhongchaohui@stimeflow.com.
2. Data we collect
None. We do not operate a server for the app, we do not have an account system, and the app makes no network requests. We therefore never receive your transactions, balances, categories, notes, device identifiers, location, contacts, advertising identifiers or usage analytics.
3. Data the app stores on your device
| What | Where | Why |
|---|---|---|
| Transactions, accounts, categories, budgets and repeating entries | A single JSON file inside the app's private container on your iPhone | So the app can show your records |
| Preferences (currency, appearance, first day of week, app lock on/off, reminder time) | iOS UserDefaults for this app on your iPhone |
So the app remembers how you set it up |
This data is covered by your device's own protections and by any iPhone backup you choose to make (iCloud Backup or an encrypted local backup). Deleting the app removes it. "Erase all data" in Settings also removes it.
4. Features that touch iOS services
Face ID / Touch ID / passcode
If you turn on App Lock, the app asks iOS to verify you through
LocalAuthentication. iOS performs the check and reports only success
or failure. The app never sees, stores or transmits biometric information.
Daily reminder
If you turn on the daily reminder, the app schedules one local notification on your device. No push token is registered and no server is involved. The notification text never contains your financial data.
CSV export
When you tap "Export all records", the app writes a CSV file to its temporary folder and hands it to the standard iOS share sheet. What happens next is entirely your choice — you pick the destination. We have no visibility into it and receive no copy.
5. Third parties
Cashleaf bundles no third-party SDKs, frameworks or libraries. It uses only frameworks provided by Apple as part of iOS. No data is shared with any third party, because no data leaves the device.
6. Tracking and advertising
Cashleaf does not track you across apps or websites, does not display advertising, and does not use the Advertising Identifier (IDFA). The App Tracking Transparency prompt is never shown because there is nothing to track.
7. Children
Cashleaf is a general-audience utility and is not directed at children under 13. Because the app collects no data at all, it collects no data from children.
8. Your rights
Rights such as access, correction, portability and erasure normally require a company to act on data it holds about you. We hold none. You can exercise the practical equivalent yourself at any time inside the app: view and edit any record, export everything as CSV, or erase all data from Settings.
9. Data retention
We retain nothing. Your records remain on your device for as long as you keep them there.
10. Changes to this policy
If the app ever changes in a way that affects this policy, we will update this page and change the "Last updated" date above before shipping that version.
11. Contact
Questions about this policy: zhongchaohui@stimeflow.com. We aim to reply within five business days.