Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains how CashYou, operated by Udit Mishra (sole proprietor), with Luvpreet Singh Cheema as Co-founder, India ("we", "us"), collects, uses, and protects your personal data when you use the CashYou app and website. We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

1. Information we collect

• Account: name, email address, and (optionally) phone number and profile photo.
• Favours: the favours you post or accept, messages with other users, ratings and reviews.
• Location: the meetup area and address you enter for a favour, and (with your permission) approximate or live location used for maps and helper tracking.
• Payments: transaction records (amount, status, fees). Card and bank details are collected and processed directly by Razorpay — we do not store them.
• Device & usage: basic technical and usage data needed to operate and secure the service.

2. Consent

We process your personal data on the basis of the consent you give when you create your account and complete your profile (and, where applicable, for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023, such as complying with law or responding to emergencies). The in-app notice tells you, in plain language, what data we collect and the purpose. Your consent is recorded with a timestamp and the version of the terms you accepted. You may withdraw consent at any time by deleting your account in-app (Profile → Delete Account) or by emailing our Grievance Officer; withdrawal does not affect processing already carried out, and we may retain records the law requires us to keep. Withdrawing consent means we can no longer provide the service.

3. How we use your data

• To operate the marketplace — matching Posters and Helpers, enabling chat, and showing locations.
• To process payments, escrow, payouts, and refunds through Razorpay.
• To verify accounts, prevent fraud and abuse, and keep users safe.
• To provide support and respond to grievances.
• To send essential service notifications (and, only with consent, optional updates).

4. Who we share it with

We share data only as needed to run the service, with:

• Other users — limited profile info, your favour details, and (after acceptance) the exact address, to coordinate the favour.
• Service providers — including Razorpay (payments & payouts), Supabase (secure database, authentication, storage), and mapping providers, who process data on our behalf.
• Authorities — where required by law or to protect rights and safety.

We do not sell your personal data.

5. Location data

Your exact address is hidden from other users until you accept a Helper. Live location sharing (for helper tracking) is used only during an active favour and only with your permission. You can disable location access in your device settings.

6. Data retention

We keep personal data for as long as your account is active or as needed to provide the service, comply with legal and financial-record obligations, resolve disputes, and enforce our agreements. Transaction records may be retained as required by law.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a summary of the personal data we hold about you and how it has been processed.
• Correction & erasure — correct inaccurate data (editable in-app from Profile) and request erasure of data no longer needed.
• Withdraw consent — at any time, as described in section 2.
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity. Email our Grievance Officer to record a nomination.
• Grievance redressal — raise a complaint with our Grievance Officer (section 12). If you are not satisfied with our response, you may approach the Data Protection Board of India.

You can delete your account in-app, which removes your personal data (subject to records we must keep by law, such as transaction records). We respond to verified rights requests within a reasonable time and in any case within the periods prescribed by law.

8. Security & breach notification

We use industry-standard measures — encryption in transit, access controls, and trusted processors — to protect your data. No method of transmission or storage is completely secure. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the Digital Personal Data Protection Act, 2023 and its Rules, including a description of the breach, its likely consequences, and the measures you can take to protect yourself.

9. Where your data is stored

Our database and authentication provider (Supabase) hosts data on servers located outside India (currently in the United States). Payment data is processed by Razorpay in India. Cross-border processing is carried out as permitted under the Digital Personal Data Protection Act, 2023; if the Government of India restricts transfers to any country we use, we will migrate accordingly.

10. Children

CashYou is only for users aged 18 and above. We require your date of birth at profile setup and do not permit accounts for anyone under 18. We do not knowingly collect children's data, and we do not track, profile, or target advertising at children.

11. Changes

We may update this policy; material changes will be notified in-app or by email.

12. Contact & Grievance Officer

For privacy questions, data requests, nominations, or grievances:

• Grievance Officer: Udit Mishra (Proprietor)
• Email: support@cashyou.dev
• We acknowledge grievances within 24 hours and aim to resolve them within 15 days. See our Grievance Redressal page for details and escalation options.