cashcal
Privacy
Last updated September 12, 2026
Cashcal is made by Christopher Edward Staton, a solo founder in the San Jose, California area. The app helps a household see the month in dollars. We do not sell your data. We do not show ads. We do not share your data with advertisers or data brokers.
Money stays on your devices
Charges, balances, and calendar notes live on your iPhone and iPad. Devices in the same household sync an encrypted copy through our servers. That copy is encrypted on your device before it leaves, and we do not hold the keys. We cannot read it.
What our servers store
- The email you use to sign in, so you can log in and so household members can see who is in the house
- Encrypted blobs we cannot open
- Device and household membership records needed to sync
- Whether Bank Sync is active, so sync can turn on or off
Our servers do not store your charges, balances, bank credentials, or bank tokens in a form we can read.
Banks and Plaid
Bank Sync is optional and sold through the App Store. If you turn it on, you connect your bank through Plaid Link, a service made by Plaid Inc. You enter your bank credentials with Plaid, not with us. We never see or store your bank username or password.
When a bank is connected, Plaid gives the app an access token. That token is sealed on your device: it is encrypted with your household key and stored in the device Keychain. Our bank relay server passes requests between your device and Plaid. It never stores access tokens, and it does not store your access tokens, account numbers, or transactions. Bank data pulled through Plaid lands on your device and is treated like the rest of your money data: it stays on your devices, and any synced copy is encrypted before it leaves. If your household shares Bank Sync, the sealed token syncs to other household devices as ciphertext only.
Plaid has its own privacy policy that covers what Plaid does with your data. You can read it at plaid.com/legal.
How your data is protected
- In transit: all traffic between the app and our servers, and between our servers and Plaid, uses HTTPS (TLS). Plain HTTP requests are redirected to HTTPS.
- At rest on your device: bank access tokens and household keys are sealed in the device Keychain. Bank tokens are also encrypted with your household key before they are stored.
- At rest on our servers: your money data is stored only as ciphertext that was encrypted on your device. The servers never receive the keys, so we cannot decrypt it.
- Sign-in uses one-time email codes. The codes expire in about ten minutes.
Purchases
Apple handles Bank Sync payment. We only learn whether Bank Sync is active so we can turn sync on or off. We never see your card number.
Data deletion and retention
You can delete your data yourself, from inside the app. Step by step instructions are on our data deletion and retention page. Here is the short version:
- Remove a bank: Settings, Connected banks, Remove. This tells Plaid to disconnect the bank and deletes the sealed access token from your device. You can also choose to erase the past charges that came from that bank.
- Delete your account: Settings, Advanced, Delete my cashcal account. This removes your sign-in and your cloud backup from our servers.
- Household copies: if other people are still in your household, their devices keep their own copies, and the encrypted household data they sync may remain on our servers for them. We cannot read that data either way.
We keep server data only as long as it is needed to run sync and sign-in. When you delete your account, your sign-in and cloud backup are removed. Routine server backups may hold deleted data for a short time before they expire, and those backups contain the same ciphertext we cannot read. If you want help, or want to confirm a deletion, email hello@cashcalapp.com and we will handle it.
Policy review
We review this policy at least once a year, and before Cashcal goes live on the public App Store. When it changes, we update the date at the top of this page.
Contact
Christopher Edward Staton, Cashcal, San Jose area, California, USA. Questions: hello@cashcalapp.com