Privacy Policy
Cayn is a financial assistant currently in private beta for users in the United States. This policy explains how we handle personal information when you use our apps, website, connected services, or support.
Account and data deletion · Data retention · Contact us
Information We Collect
Account information: name, email address, sign-in information, contact details, preferences, shared-access membership, and subscription status. Some features may ask for additional contact or verification details. Sign-in providers may share identity information when you choose to use them.
Content you provide: financial and property records, receipts, photos, documents, contact details, questions, messages, signatures, responses, and support attachments, together with information extracted from them and corrections you make. This may include information about someone without a Cayn account. Provide another person's information only when authorized. Camera and photo access is used when you choose to provide images.
Optional financial connections: with your authorization, financial-data providers supply account details, balances, transactions, and other permitted financial data, which may include liabilities or investments. We securely store connection tokens, not your bank login credentials.
Optional email connections: if you connect Gmail, read-only access lets us find and process financial and rental messages, such as receipts, bills, and messages about your rental properties, and their relevant attachments, to organize your records. Processing may continue in the background while enabled. This access does not let Cayn send, modify, or delete messages and is not used for unrelated email. Details are in Google User Data (Gmail).
Other authorized information: information from other services you choose to connect or ask us to use, such as calendar, property, or location information.
Verification and electronic records: contact-detail checks, limited-duration access cookies or tokens, submitted signatures or acknowledgments, consent and document versions, timestamps, and related audit evidence. Verification checks are not a guarantee of identity.
Technical information: IP addresses, approximate country or region inferred from connection information, app and operating-system versions, device and session identifiers, notification tokens, diagnostic events, and service logs. Device biometrics stay on your device; Cayn does not receive your fingerprint or face template.
Website analytics: when you visit cayn.ai, we count page visits without cookies, including the page viewed, the referring site, and approximate location. We do not store IP addresses for this purpose.
How We Use Information
We use information to provide the features you request, organize and analyze authorized information, respond to questions, manage accounts and subscriptions, maintain records, and carry out supported actions you approve. We also provide support, improve reliability, prevent abuse, protect accounts, and meet legal obligations.
AI providers may process submitted images, documents, extracted text, financial descriptions, questions, and relevant records to produce organized information and responses. Automated results may be inaccurate and should be reviewed.
Eligible non-identifying details may improve shared reference information under the applicable confirmation and contribution rules. These contributions do not expose your name, account details, or original images to other users.
How We Share Information
We do not sell personal information. Service providers process information needed to deliver Cayn, including cloud hosting and storage providers such as AWS, financial-data providers such as Plaid, AI providers such as Google Gemini and OpenAI, and sign-in, property-data, email-delivery, notification, subscription, billing, and support providers.
People you authorize may access the information you share with them. Members of a shared workspace and relevant participants or recipients may receive shared records, documents, responses, or signatures. Recipients may keep their own copies. We may also disclose information to comply with law, protect rights and safety, prevent fraud, or as part of a business transfer, subject to applicable restrictions.
Authorized staff may use operational and support tools to respond to requests and monitor security. These tools may receive limited account, device, and activity information. We do not include passwords, verification codes, or bank credentials in operational alerts.
Connected Gmail data is shared only as described in Google User Data (Gmail).
Product updates by email
For U.S. users, we may enroll your verified Cayn account email address to receive occasional product news, major feature announcements, and promotional updates unless you opt out. Where applicable law requires consent, we ask for it before sending these emails. Accepting our Terms or Privacy Policy does not replace any separate consent required by law.
You can unsubscribe without signing in using the link in any product-update email. The same email-preferences page lets you subscribe again. You can also contact contact@cayn.ai for help with your preference. Unsubscribing does not stop necessary account, security, billing, or service communications.
We use your account email address and subscription preference for these announcements, and our email-delivery provider processes them on our behalf. We record delivery, bounce, complaint, and subscription-change information to operate the list. We do not use your connected Gmail content, bank transactions, or rental records to target these announcements, and we do not enable email-open or link-click tracking for them.
Campaign recipient and delivery records are kept for up to 90 days and are included in account deletion. We may retain the minimum email preference or suppression information needed to honor an unsubscribe request and prevent unwanted messages. Account deletion stops future product announcements.
Google User Data (Gmail)
What Cayn accesses. Connecting Gmail is optional. If you connect it, Cayn asks Google for read-only access to your Gmail messages (the gmail.readonly permission) and for your Google account's email address. Cayn searches your mailbox only for financial and rental emails, such as receipts, bills, and messages about your rental properties, and reads those messages and their attachments.
How Cayn uses it. Cayn uses this data only to provide the features you use: finding receipts and bills and extracting details such as the merchant, date, amount, and items so they can be organized with your transactions and records, and, when you ask Cayn to help add a tenant, finding the related message and extracting the sender's name, contact details, and requested dates. Cayn does not use Gmail data for advertising, does not sell it, and does not use it to train or improve generalized AI or machine-learning models.
Who processes it. Relevant email content is processed by our AI service providers (Google Gemini and OpenAI) only to extract these details, and the results are stored with our cloud hosting provider (AWS). We do not otherwise share Gmail data, except when required by law. People at Cayn do not read your email unless you ask us to for support, it is needed for security, or the law requires it.
Storage and protection. Gmail access tokens are encrypted with AWS Key Management Service. Cayn stores the details it extracts and, when you attach an email receipt to a record, a copy of that receipt. Extracted results are cached for up to 90 days so the same email is not processed twice, and email receipts you have not reviewed are discarded after 7 days.
Retention and deletion. You can disconnect Gmail at any time in Cayn's Settings under Email accounts, or remove Cayn's access in your Google Account's third-party connections. Disconnecting revokes Cayn's access token and stops further access; records you saved stay in your account until you delete them. Deleting your Cayn account revokes the connection and deletes saved records as described in Data Retention.
Cayn's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Security
We use encrypted connections, access controls, and encryption for sensitive stored information and connection tokens. Access is limited according to service and support needs. No system can guarantee absolute security.
Data Retention
We retain account information and saved content while needed to provide the service. Disconnecting an integration stops future access through that connection; previously saved records remain until deleted. New-account security notification records in Cayn expire after 30 days; copies delivered to operational providers follow their applicable retention settings.
We aim to remove primary personal and financial data within 30 days of a verified deletion request. Support attachments and routine diagnostic logs have a retention target of up to 90 days, unless needed for an active investigation. Security records, such as sign-in history, security event records, and request logs that include IP addresses, are kept for up to 18 months to detect, investigate, and prevent fraud, abuse, and unauthorized access, and are then deleted. Verification codes and sessions expire according to their security settings.
After a household subscription ends, including when trial or complimentary access expires, we notify the account owner and keep the saved workspace records for 90 days from that notice. The app shows the deletion deadline, and we send reminders before it. During that period, saved records can be viewed and exported, and renewing before deletion starts cancels the scheduled deletion. Otherwise we automatically disconnect bank and email connections and delete the saved workspace records and documents. Sign-in identity, household membership, subscription and purchase history, support cases, and security records follow their separate retention purposes. A new subscription after deletion has started cannot restore deleted records.
Limited information may remain for security, fraud prevention, legal compliance, or disputes. Encrypted backups expire according to their recovery periods and are not used for active services after deletion is completed. If an exception affects your request, we will explain the reason and retention period. Deletion cannot recall messages or documents already received or independently retained by another person.
Your Choices and Account Deletion
You can edit supported account information, control notifications and device permissions, and disconnect optional integrations. Contact us to request access to or correction of other personal information, including information provided about you by another user, even if you do not have a Cayn account.
To delete your Cayn account and its associated history, open Settings → Delete Cayn Account and confirm the request. This starts automatic deletion and signs you out. Connected bank and email access is revoked before the stored connection credentials and account data are erased. You can also use our Delete Cayn Account page without installing or signing in to the app. Requests sent through that page require confirmation through the registered email address and approval by our team.
Deletion covers your profile and account-owned content, including saved records, files, and conversation history, subject to the retention exceptions above. Content owned by others is not deleted merely because your shared access ends. Deleting your shared records can affect other people's access.
Deleting Cayn does not close your bank accounts or automatically cancel a subscription billed by Apple or Google Play. Manage that subscription with the store that bills you; cancellation is not a prerequisite for submitting a deletion request.
Children
Cayn is intended for adults 18 and older and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe someone under 18 has provided personal information to Cayn, contact us so we can investigate and address it.
Changes
We will update this page and its effective date when this policy changes. We will provide additional notice of material changes where required.
Contact
For privacy questions or requests, email contact@cayn.ai. We may verify that you control the account before disclosing or deleting information. Do not send passwords, verification codes, bank credentials, or full payment-card numbers.