Privacy notice

Revision 2026-08-25

Responsible for processing your personal data: Caudal (caudalapp.app). For any request about your data: nikiaskray0414@gmail.com, or the support form inside the app.

This notice explains what we collect, why, who we share it with and how to exercise your rights.

What we collect

At signup: your email address and, if you type it, your name. Your password is stored hashed — nobody can read it, including us.

What you enter in the app: accounts, balances, income, expenses, categories, debts, savings goals and subscriptions. This is financial data and we treat it as such.

Preferences: language, main currency, time zone and whether you enabled notifications.

Minimal technical data needed to run the service: the date of your last visit and, if you consented, usage statistics.

Where you came from: if you arrived through a link with campaign parameters, we store that source to see which channels work. It is not combined with data from third parties.

Necessary purposes

These are indispensable: without them the app cannot work, so they can't be opted out of while keeping the account.

Running the service: showing your finances, computing balances, converting currencies and sending the reminders you turned on.

Identifying you at sign-in and keeping your account secure.

Answering your support messages.

Usage statistics and messages

We measure how the app is used: which screens get opened, where a process gets abandoned, and what breaks. It is how the service gets fixed and improved, and how we decide what to build next.

These statistics contain none of your amounts, accounts or transactions. Financial data is never sent to measurement tools.

They are collected continuously, without a separate request, on the basis of our legitimate interest in running and improving the service. If you would rather it did not happen, write to us and we will exclude your account.

Tips and news are a separate matter: those you accept explicitly at signup and can withdraw by writing to us.

Express consent for financial data

The balances, income, expenses and debts you record are financial data, and the law requires your express consent to process them.

That consent is the box you tick when creating the account: it is not pre-ticked, and without it the registration does not complete. We store the date and the revision of this notice you accepted.

How to limit the use of your data

Switch statistics off under Settings → Data and privacy.

Withdraw consent for tips and news by writing to our contact address.

Turn notifications off in the app or in your phone's settings.

Ask for your account to be deleted, which stops all processing.

Providers that process data on our behalf

These act as processors: they handle the data only on our instructions and cannot use it for their own purposes, which is why their involvement needs no separate consent.

Supabase — database and authentication.

Vercel — application hosting.

Resend — sending the service emails (account confirmation, password recovery, support).

The push notification services of your browser or operating system, if you enabled reminders.

Google Tag Manager and the measurement tools configured inside it — only if you accepted statistics.

Your browser's speech recognition service — only if you use voice entry. The recording goes to the browser's maker (Google, in the case of Chrome) and comes back as text; we neither receive nor store the audio. Voice entry is switched on by a separate confirmation and does not work without it.

Transfers

We do not transfer your data to third parties for their own purposes. We do not sell it and do not share it with advertisers.

If a transfer requiring your consent ever became necessary, we would tell you and ask for authorisation before making it.

Cookies

Necessary: keep you signed in, remember your language and record your last visit. The app does not work without them, so they need no consent.

Measurement: set only if you accept the statistics notice. You can change your mind at any time in settings.

How long we keep it

As long as your account exists. If you ask for deletion, we erase your personal and financial data; we keep only the record of your consents, because that record is the proof they existed.

Your rights

You can ask for access to your data, correction if it is wrong, deletion when you no longer want us to process it, and object to a specific use.

Write to nikiaskray0414@gmail.com from your account's email address, or use the support form inside the app, saying what you want. We reply within 20 working days at most.

Withdrawing consent for statistics or for news does not affect your use of the app.

If our answer doesn't satisfy you, you can turn to the data-protection authority where you live. In Mexico that has been the Secretaría Anticorrupción y Buen Gobierno since 2025.

Security

Connections are encrypted. Data access is restricted at the database level: each account can only read and write its own records.

No system is perfect. If a breach affected your data, we would tell you.

Children

The service is not aimed at people under 18 and we do not knowingly collect their data.

Region-specific details

This notice is written to the strictest standard we know of, so that it holds wherever you live. These are the local specifics:

Mexico: your rights are known as ARCO rights (access, rectification, cancellation, objection) and the competent authority is the Secretaría Anticorrupción y Buen Gobierno. Processing financial data rests on your express consent — the box you tick at signup.

European Union and EEA: we process your data to perform the contract you accept with these terms, and on your consent for the additional purposes. You also have the right to data portability and to lodge a complaint with your national authority.

Brazil: the rights set out in the LGPD apply and the competent authority is the ANPD.

Argentina and other countries in the region: local rights of access, rectification and deletion apply, through the same contact channels listed above.

Changes to this notice

Any change is published on this page as a new revision, and if it is material we will ask you to accept it when you open the app.