Privacy Policy

Privacy Policy

1. Data Controller Statement & Global Compliance

Al Muhaymin Enterprises FZE LLC respects your personal privacy. This Privacy Policy outlines how cashcorder collects, processes, stores, and protects your information in compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), EU/UK GDPR, CCPA, and App Store & Google Play Developer Privacy Guidelines.

2. Categories of Information We Collect

• Account & Tax Data: User full name, email address, company name or individual name, and encrypted password credentials.

• Petty Cash Logs: Transaction titles, monetary values, currencies, transaction dates, vendor details, categories, notes, and entry timestamps.

• Receipt Images & Media: Digital photographs and scanned images of receipts, invoices, cash vouchers, or bills captured via camera or gallery.

• Device & Diagnostics: Device model, OS version, UUID, IP address, crash logs, last login timestamp, and cloud sync metrics.

3. Purpose & Legal Basis for Data Processing

We process data under lawful bases: (a) Performance of Contract to deliver service; (b) Legitimate Interests to manage cloud storage costs, detect fraud, and maintain network security; (c) User Consent for camera/gallery permissions; and (d) Legal/Tax Compliance.

4. Camera & Media Access Permissions

Strict Gallery & Camera Scope: cashcorder requests permissions to your camera and photo library solely to allow you to photograph or attach receipt files. cashcorder does NOT access, scan, collect, or transmit any unrelated personal photos, media files, or private camera roll data from your device.

5. Cloud Infrastructure, Data Storage & Cross-Border Transfers

Your account records and receipt attachments are securely stored in managed cloud database infrastructure (such as Google Cloud Platform / Firebase) located in UAE, EU, or US data centers under high encryption protocols.

6. Technical Security Measures & Safeguards

We implement TLS 1.3 encryption for data in transit, AES-256 bit encryption for data at rest, strict cloud access rules, and regular vulnerability audits.

7. Non-Disclosure & Third-Party Disclosures

Company does NOT sell, rent, trade, or monetize your personal financial data or receipt images to third-party marketing firms. Data is shared strictly with essential providers (Google Cloud/Firebase, Apple/Google Payment Gateways, and law enforcement upon legal order).

8. Data Retention, Inactivity Purging & In-App Account Deletion Rights

Automated Data Retention & In-App Deletion Rules:

• Expired Subscription Accounts: For accounts with a paid membership subscription that expires without renewal or is cancelled from the App Store / Play Store (and where the account has not been manually deleted), all transaction logs, financial entries, and receipt images will be retained in active cloud databases for a maximum of six (6) months following the membership expiration date. Upon reaching six (6) months post-expiration, all data will be permanently and automatically purged from active databases.

• Free Accounts & Non-Active Users: For accounts that have never purchased a paid membership subscription, or accounts remaining inactive without manual deletion, all associated account records, transaction entries, and uploaded images will be permanently deleted after six (6) months from the user’s LAST LOGIN date.

• Courtesy Deletion Notice & Spam Filter Disclaimer: An informational courtesy email notification will be sent to the user’s registered email address prior to permanent data deletion. Company shall not be held liable or responsible if the user fails to receive or view such notice due to an outdated email address, email server delivery failure, or if the email is automatically routed into the user’s spam, junk, or promotional email folders.

• Mandatory In-App Account Deletion Process (Apple App Store / Google Play): You may initiate the complete and immediate deletion of your cashcorder account and all stored data at any time directly within the mobile application by opening the side drawer (navigation menu) on your main dashboard page immediately upon logging in and selecting: Side Drawer (Navigation Menu) > Delete Account. Alternatively, you may submit a written deletion request to support@cashcorder.app. Upon manual account deletion, all personal data, expense logs, and media files are permanently purged from active cloud storage within thirty (30) days.

9. User Rights under UAE Law & Specific Rights for EU / EEA / UK Residents (GDPR)

Users possess rights to access, export data (CSV/PDF), rectify errors, request erasure, and lodge complaints with local Data Protection Authorities (DPA) under GDPR.

10. Children’s Privacy Notice (COPPA / GDPR-K)

cashcorder is strictly designed for adults (18+). We do not knowingly collect personal data from children. Accounts created by minors will be deleted immediately upon discovery.

11. Modifications to Privacy Policy

Company reserves the right to update this Privacy Policy to reflect app enhancements or statutory updates. Continued use of cashcorder constitutes acceptance of updates.

12. Legal Contact & Customer Support

Company Contact Details: Company Entity: Al Muhaymin Enterprises FZE LLC Application: cashcorder Primary Jurisdiction: United Arab Emirates (UAE) Legal & Data Protection Email: support@cashcorder.com Official Website: www.cashcorder.com