Privacy Policy

Casshi is operated by Casshi. This policy covers the Casshi website and app, and it describes what actually happens in the product rather than what a template says usually happens.

Use the contact address published on this site.

Only three kinds of information, and you can see nearly all of it inside the app:

• Account details. Your email address, and a name and profile picture if you signed in with Google or set them yourself. A password is never stored by us in readable form — authentication is handled by Supabase Auth.
• What you record. Transactions, budgets, savings goals, categories, saved payment methods (a label, the card type and the last few digits — never a full card number, PIN or CVV), expense groups and settlements. All of it is typed, spoken or photographed by you.
• Payment evidence. If you buy a paid plan, the receipt or screenshot you upload, the method you used, and the amount, so a person can check the transfer arrived.
• Technical records. IP address, approximate city and country, browser and device type, and the pages you visited. A coarse device signal is also derived in the browser during signup, used only to stop one person farming referral rewards from a single machine.

We do not connect to your bank, and we do not ask for banking credentials. We never see, request or store full card numbers.

• To run your account and show you your own records.
• To check a payment you sent and start the plan you paid for.
• To send transactional email you would expect: welcome, password reset, plan expiry reminders, group activity and payment updates.
• To keep the service honest and safe: rate limits, referral abuse checks, and a security log of sign-ins and account changes that you can read in Settings.
• To count visits, so we know which pages are worth keeping. This is aggregated into daily totals.

We do not sell your data, we do not share it with advertisers, and we do not run advertising or third-party tracking scripts on this site.

Only the services needed to run the product, and only what each one needs:

• Supabase — database, authentication and file storage. Everything you record lives here.
• Vercel — hosting. It processes requests to the site.
• Groq — the AI provider. A receipt photo, or the text of a spoken sentence, is sent for extraction only at the moment you press Scan Receipt or Speak. Nothing is sent in the background, and the feature is only available on paid plans.
• Resend — the email provider. It receives your address and the contents of the messages above in order to deliver them.
• Google — only if you choose to sign in with Google.
• An IP geolocation service — to turn a visitor's IP address into an approximate city. This can be switched off entirely by the operator.

If you never use receipt scanning or voice entry, no part of your financial records is ever sent to an AI provider.

• Your records are kept for as long as your account exists. Nothing is deleted because a plan ended or was downgraded — a lower plan changes what you can add next, never what you already have.
• Raw page-view rows are deleted after 90 days. Only the daily totals derived from them are kept.
• If you close your account, it is held for 30 days and then permanently destroyed, along with everything in it. The 30 days exist so an accidental or regretted deletion can be undone; after that it cannot.

• See it. Everything you have recorded is visible in the app.
• Take it with you. Settings has an export that gives you your data as CSV or JSON. It is not gated behind a paid plan.
• Correct it. Every record you create can be edited or deleted by you at any time.
• Delete everything. Settings has an account deletion that starts the 30-day process described above.

If you want a copy of anything the app does not already show you, or you want your data removed sooner, ask. Use the contact address published on this site.

There are no advertising or analytics cookies on this site. Two cookies are used:

• A session cookie, set by Supabase Auth, which is what keeps you signed in. Without it the app cannot work.
• A referral cookie (casshi_ref), set only if you arrive through someone's invite link, so the invite can be credited when you finish signing up. It lasts 30 days and is cleared as soon as it is used.

The app also stores some preferences in your browser's local storage — things like your chosen theme and currency. That never leaves your device.

Every table in the database has row-level security, which means the database itself refuses to return another account's rows — access control is not left to the application code alone. Sessions are listed in Settings and can be revoked individually, and two-factor authentication is available.

No service can promise it will never be breached. If something happens that affects your data, we will tell you rather than hope you do not notice.

This service is not intended for children under 13, and accounts are not knowingly created for them.

If what we collect, share or keep changes, this page changes with it and the date at the top moves. Material changes will also be announced in the app.

This policy is governed by the law of Pakistan.