Privacy Policy

cashout.community is an online platform that helps ambitious young people, creatives, and immigrants in North America elevate across seven pillars of growth. To run that platform — accounts, progress tracking, community channels, memberships — we necessarily process some personal data. We collect only what we need, keep it no longer than necessary, and never sell it.

This policy applies to cashout.community and all signed-in product surfaces hosted under it. It does not cover third-party sites we may link to, which operate under their own privacy policies.

We collect the following categories of information, almost all of it directly from you:

We do not knowingly collect special-category data (such as health, biometric, or precise-location data), and we ask that you not share it through community channels.

We use the data above to:

• Create, authenticate, and secure your account.
• Provide the core product — track your progress, XP, streaks, achievements, and rank.
• Power community features such as channels, leaderboards, and referrals.
• Process memberships, payments, renewals, and entitlements through our payment processor.
• Personalize your experience based on the preferences and pillar focus you set.
• Understand how the product is used, debug issues, and improve features over time.
• Send essential service communications and, only if you opt in, product updates.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with our legal obligations and enforce our terms.

We do not sell your personal data, and we do not use it to train third-party advertising profiles.

To make your guidance fit your actual life, we keep a compact personalization profile. Where you tell us a detail — directly in settings, through your responses in lessons, or naturally in a conversation with the AI coach — we may store it as a coded value. We never require it, never interrogate you for it, and you can view, change, or clear every field at any time under Settings → Your data. This profile may include, only to the extent you choose to share it:

• Vehicle ownership
• Income band
• Occupation status
• Location / area type
• Housing situation
• Relationship status
• Activity / physical level
• Emotional focus
• Health context
• Credit situation
• Upbringing context
• Behavior patterns
• Household make-up
• Peer network
• Race / ethnicity
• Dietary preference

Some of these are sensitive categories (such as health, financial, and racial or ethnic information). We treat them with extra care, store them only when you volunteer them, and rely on your explicit consent as the legal basis. You can withdraw that consent at any time by clearing the data, and deleting your account removes it entirely.

Where data-protection law (such as the GDPR or comparable Canadian provincial law) requires a legal basis, we rely on the following:

• Contract — to deliver the service you sign up for, including accounts, progress tracking, and membership.
• Legitimate interests — to secure the platform, prevent abuse, and improve our product, balanced against your rights.
• Consent — for optional things like marketing emails or non-essential cookies, which you can withdraw at any time.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

We share data only with the service providers (“processors”) that help us run cashout, and only as needed. Each is contractually bound to protect your data and use it solely on our instructions.

We may also disclose data if required by law, to respond to lawful requests from authorities, to protect the rights and safety of our members or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you and this policy will continue to apply).

We use a small number of cookies and browser local-storage entries — not for advertising, but to make the product work:

• Essential / authentication — session cookies that keep you signed in and protect against cross-site request forgery. The product won’t function without these.
• Preferences — local storage that remembers settings like your referral code, theme, and accessibility choices.
• Analytics — first-party usage events tied to your account, used to understand product usage. We do not use third-party advertising trackers.
• Funnel analytics — before you sign in, a random first-party identifier (the co_visitor cookie) lets us count anonymous steps like landing visits and reaching the sign-in page, so we can see where people drop off. It holds no personal information, is never shared, and we honor your browser’s Do Not Track setting — with DNT on, we set no such cookie and record nothing.

You can clear or block cookies through your browser settings, but doing so may sign you out or break parts of the product.

We keep your personal data for as long as your account is active and you continue to use the service. When you delete your account, we delete or irreversibly anonymize your personal data within a reasonable period, except where we must retain certain records to:

• Meet legal, tax, or accounting obligations (for example, billing records kept by our payment processor).
• Resolve disputes, prevent fraud and abuse, or enforce our agreements.

Backups are purged on a rolling schedule, so deleted data may persist in encrypted backups for a short time before being overwritten.

We take the security of your data seriously and apply industry-standard safeguards, including encryption in transit (HTTPS), encryption at rest with our infrastructure providers, row-level access controls so members can only reach their own data, scoped database policies, and privileged operations gated behind authenticated, server-side checks.

No system is perfectly secure, so we can’t guarantee absolute security. Help us protect your account by keeping your sign-in method secure. If we ever become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

Depending on where you live, you have some or all of the following rights over your personal data. We honor these rights for all members regardless of location.

• Access — request a copy of the personal data we hold about you.
• Portability / export — receive your data in a portable, machine-readable format.
• Correction — fix inaccurate or incomplete data; most profile fields you can edit yourself in Settings.
• Deletion — delete your account and associated personal data.
• Objection / restriction — object to or restrict certain processing, such as analytics or marketing.
• Withdraw consent — opt out of marketing or non-essential cookies at any time, without affecting prior processing.

To exercise any of these rights, email us at privacy@cashout.community. We respond within the timeframe required by applicable law (typically 30 days). You also have the right to lodge a complaint with your local data-protection authority — in Canada, the Office of the Privacy Commissioner.

cashout.community is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at privacy@cashout.community and we will delete it promptly.

cashout is built in Canada and serves members across North America and beyond. Our service providers (including Supabase, Stripe, Vercel, and Google) may process and store data on servers located in other countries, including the United States. When we transfer personal data across borders, we rely on appropriate safeguards — such as standard contractual clauses and providers’ own compliance frameworks — to ensure your data receives a comparable level of protection.

We may update this policy as the product evolves or the law changes. When we do, we’ll revise the “last updated” date above, and for material changes we’ll give you reasonable notice — for example, an in-product notice or email. Your continued use of cashout after an update means you accept the revised policy.

Questions about this policy or how we handle your data? We read every message and take privacy seriously.