Privacy Policy
Last updated: October 10, 2026
This policy explains how 2Cash (the mobile app and the website 2cash.app) collects, uses and protects personal data. 2Cash is operated by GTECH Serviços de Tecnologia Ltda, Brazilian company registered under CNPJ 46.227.303/0001-42, headquartered at Rodovia Gabriel Arns, nº 3.228, Ouro Negro, Forquilhinha/SC, CEP 88.850-000, Brazil ("we"), the controller of your data under Brazil's General Data Protection Law (LGPD) and, where applicable, the EU/UK GDPR and other privacy laws.
1. Data we collect
- Account: name, email, password (stored only as a one-way hash) or the identifier provided by Sign in with Apple or Google, preferred language and time zone.
- Couple data you enter: expenses, amounts, categories, descriptions, dates, splits, recurring bills, installments, trips and exchange rates, goals and contributions, settlements, budgets and, if you choose to add it, your Pix key (Brazil).
- Device: push notification token and notification preferences, if you enable notifications.
- Subscription: plan status and store transaction identifiers. Payments are processed by Apple or Google; we never receive your card details.
- Usage and diagnostics: anonymous product events (for example "expense added", never amounts, descriptions, names or emails) and crash reports.
- Assistant features: the text you type or dictate to fill in an expense, and the public receipt page read from a fiscal receipt QR code (Brazil). This content is used only to suggest the expense and is not stored.
- Website: the email you submit to join the waitlist, your language and the campaign that brought you (UTM parameters and referrer). With your consent, analytics and advertising cookies (see section 7).
2Cash does not connect to your bank accounts and does not ask for banking credentials.
2. How we use it
- To provide the service: keep your couple's records, calculate splits and balances, send the emails you request (such as password reset codes) and the notifications you enable. Legal basis: performance of a contract.
- To keep 2Cash secure and working: prevent abuse, fix errors and measure performance. Legal basis: legitimate interests.
- To manage subscriptions and comply with legal obligations. Legal basis: contract and legal obligation.
- To contact waitlist members and measure our campaigns. Legal basis: consent, which you can withdraw at any time.
We do not sell your personal data and do not use your financial records for advertising.
3. Sharing within your couple
2Cash is designed for two people. Everything recorded in a shared couple space is visible to both members. If you leave a couple or delete your account, the shared history remains available to the other member (in read-only form for past couples), because it also belongs to them.
4. Service providers
We use trusted providers that process data on our behalf and under contract:
- Railway (application hosting, United States) and Neon (database, United States);
- Resend (transactional email);
- Expo (app updates and push notification delivery), Apple and Google (push, sign-in and payments);
- OpenAI (assistant features: only the text or receipt page, the couple's first names and category names are sent, never emails; not stored by us and not used to train models);
- RevenueCat (subscription management);
- Sentry (crash reports) and PostHog (anonymous product analytics);
- Cloudflare (website hosting and security) and, if you consent, Google and Meta (website analytics and ads).
Some providers are located outside your country, including in the United States. International transfers rely on contractual safeguards required by the applicable law.
5. Retention
We keep your data while your account is active. When you delete your account in the app, we remove your personal identifiers (name, email, password, Pix key, sign-in links and devices) immediately; shared couple records remain only as described in section 3. Waitlist entries are kept until launch communications end or until you ask us to delete them. Backups are overwritten within a limited period.
6. Your rights
You may request access, correction, deletion, portability, information about sharing and withdrawal of consent, and you may object to processing. You can edit your profile and delete your account directly in the app, and export your records to CSV. For any other request, email privacy@2cash.app. You may also complain to your data protection authority (in Brazil, the ANPD).
7. Cookies on the website
The website works without cookies. If analytics or advertising tools are enabled, they are loaded only after you accept them in the cookie banner. You can change your choice anytime through "Cookie preferences" in the footer.
8. Security
Data is encrypted in transit (HTTPS), passwords are stored only as hashes, access to production systems is restricted and the app can be locked with Face ID or fingerprint. No system is perfectly secure; if an incident affects you, we will notify you and the authorities as required by law.
9. Children
2Cash is intended for adults (18+) and is not directed to children.
10. Changes
We may update this policy. Material changes will be announced in the app or by email before they take effect.
11. Contact
GTECH Serviços de Tecnologia Ltda · CNPJ 46.227.303/0001-42 · Rodovia Gabriel Arns, nº 3.228, Ouro Negro, Forquilhinha/SC, CEP 88.850-000 · privacy@2cash.app