Privacy Policy

Who we are

Proxima Cashflow is made by Proxima, a software studio based in Cagayan de Oro, Philippines. We decide how your data is used and are responsible for it under the Philippine Data Privacy Act of 2012 and the other laws that apply to you.

For anything about your data, email contact@proxima.com.ph.

What we store

• Your account: email address, name, language, and when you joined. Your password is never stored as you typed it, only a one-way hash of it.
• If you sign in with Google or Facebook: that account’s id, and the name and email address it shares with us. We never see your Google or Facebook password, contacts or posts, and we cannot post for you.
• Your records: the accounts, entries, repeating bills, categories, reminders, to-dos and notes you add, with their amounts, dates and descriptions.
• Sharing: the email addresses you invite, who you are connected with, and your sharing settings.
• Settings and notices: your reminder and calendar settings, in-app notifications, and, if you turn on push reminders, the address your browser gives us to deliver them.
• Security records: when and from which browser you signed in, and sign-in attempts (email address, IP address, time and whether it worked), so we can stop people guessing passwords.
• Basic request logs: like any website, our servers record requests (page, time, result) to keep the service running and secure.

We do not connect to your bank or e-wallet, and we do not ask for card numbers, account numbers or government IDs. Please don’t put them in your notes either.

Cookies and your device

• A sign-in cookie keeps you logged in. It is needed for the app to work.
• A short-lived cookie protects the Google and Facebook sign-in step, and is removed when it finishes.
• Your browser also keeps your language, light or dark theme, a few view settings, and any changes made offline that are waiting to be sent. These stay on your device.

We use no analytics, advertising or tracking cookies, and no third-party trackers.

Why we use it

• To run the app for you: show your records, work out balances, and keep your devices in step.
• To send the reminders and notices you turn on, by email, in the app, or as push notifications.
• To show your records to the people you choose to share with, as your sharing settings allow.
• To keep accounts secure and the service working, and to answer you when you contact us.

We use your data because you asked us to provide the app (our agreement with you), because keeping it secure is a legitimate need, and, for push reminders and Google or Facebook sign-in, because you chose to turn them on.

We never sell your data, use it for advertising, or share it for anyone else’s marketing.

Who else sees it

• People you connect with see what your sharing settings allow, and nothing more. People who invite you see your email address and whether you accepted.
• Our hosting provider runs the servers and database the app uses.
• Our email provider delivers sign-up, invitation and reminder emails.
• Browser push services (run by Google, Apple, Mozilla or Microsoft, depending on your browser) deliver push reminders. The reminder’s text is encrypted on the way.
• Google or Facebook, only if you sign in with them.

These providers handle data on our behalf and only for these purposes. Some store data outside the Philippines; we choose providers that protect it to a standard comparable with Philippine law.

We may disclose data if the law requires it, for example a valid court order, and we will tell you when we are allowed to.

How long we keep it

• Your account and records: until you delete them or ask us to delete your account.
• In-app notifications: 30 days.
• Invitation links: they stop working after 14 days.
• Security records: while your account exists.

To delete your account and everything in it, email contact@proxima.com.ph from the email address on your account. We do it within 30 days and confirm when it is done.

Your rights

Under the Data Privacy Act of 2012 you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct anything that is wrong (most of it you can change in the app yourself);
• delete your data, or stop or limit how we use it;
• give you your records in a format you can take elsewhere.

Email contact@proxima.com.ph and we will reply within 30 days. If you are not happy with our answer, you can complain to the National Privacy Commission (privacy.gov.ph).

Keeping it safe

Connections are encrypted, passwords and sign-in tokens are stored only as one-way hashes, and too many wrong passwords in a row are blocked for a while. Only the people who run the service can reach the database, and only to keep it working or when you ask for help.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the National Privacy Commission as the law requires.

Children

Proxima Cashflow is not meant for children under 13. Teenagers should use it with a parent or guardian’s permission. If you think a child under 13 has an account, tell us and we will delete it.

Changes to this policy

If we change how we handle data, we update this page and the date at the top, and tell you in the app or by email before an important change takes effect.

Contact

Email contact@proxima.com.ph. We answer within 30 days, usually much sooner.