Last updated: 10 July 2026
CashLog is a private, local-first financial-tracking app for musicians and freelance performers. This notice explains exactly what data CashLog collects, why, who holds it, and the rights you have over it. It covers the CashLog app only — not the trouper.in website or its newsletter. Plain version up front: your actual income, expense and gig records never touch a Trouper server. They live on your own device and in your own Google Sheet.
CashLog is built and operated by Nakul Vagale, working as a sole proprietor. Under India's Digital Personal Data Protection Act, 2023 (DPDP), Nakul Vagale is the Data Fiduciary for the limited data described below, and you — the person using the app — are the Data Principal. If a formal business entity is registered in future, this notice will be updated to name it.
CashLog is deliberately built so that almost no data reaches us. Here is every category, in full:
| Data | Purpose | Held by | Notes |
|---|---|---|---|
| Email address | Signing in via a one-time code (OTP), and keeping you signed in | Supabase (identity / session store) | Never used for marketing. Sign-up is not self-serve — Nakul manually provisions each beta tester. |
| Supabase user ID, OTP / session tokens | Authentication | Supabase | Identity only — no financial or business data ever touches Supabase, by design. |
| Google OAuth access token | Lets CashLog sync your entries to your own Google Sheet / Drive | Held only in your browser's sessionStorage — never on a Trouper server |
Optional — you can skip it, and connect or disconnect any time. The scope is drive.file (only files CashLog itself creates) plus spreadsheets, not full Drive access. |
| Your financial entries (income / expense / gig records) | The app's core purpose | Your own device (localStorage) and your own Google Sheet | Trouper has no server-side copy and no access to this data at all. This is CashLog's core promise. |
| OTP delivery email content / logs | Delivering your sign-in code | Resend (noreply@mail.trouper.in) |
Used because Supabase's free-tier email has a low rate limit. |
| Voice audio (only if you use "Tap & Speak" quick-entry) | Converting speech to text for faster logging | Your own browser's built-in speech recognition (SpeechRecognition / webkitSpeechRecognition) |
Not a Trouper-integrated service. See the disclosure below. |
The trust promise, stated plainly: Trouper never holds a server-side copy of your financial data and has no way to read it. Your records sync only between your device and the Google Sheet in your own Google account.
If you use the optional "Tap & Speak" quick-entry feature, CashLog uses the speech-recognition capability built into your web browser to turn what you say into text. This is your browser's own feature, not a Trouper service.
On some browsers — notably Chrome — this feature sends the audio to that browser vendor's own servers (for example, Google's) to perform the transcription. This is standard behaviour of the browser you have chosen to use; Trouper does not control, initiate, or receive any data from that process. We disclose it here so you can make an informed choice. If you would rather no audio leave your device this way, simply type your entries instead of using "Tap & Speak".
Before your first sign-in, CashLog shows a consent screen with three separate checkboxes — none of them pre-ticked:
This is an account-level data-use consent, not a cookie banner. This privacy notice is the "full details" that the consent screen links out to.
CashLog is for adults. You must be 18 or older to use it, which you affirm on the consent screen. CashLog is not intended for, or directed at, anyone under 18.
The CashLog app contains no analytics, no telemetry, no crash reporting, and no hidden tracking SDKs. We do not build a profile of how you use the app. This is true today and is a deliberate design choice, not an oversight.
Your financial data is already fully in your hands — it sits in your own Google Sheet and on your own device, where you can view, edit, correct or delete any entry at any time. No request to us is needed for that.
Deleting your identity data (email address, account, session records) is currently a manual process: email hello@trouper.in and Nakul will delete your Supabase record. There is not yet a self-serve "delete my account" button in the app.
Our commitment: we delete your identity data — email address, account record, session and OTP logs — within 90 days of a deletion request or confirmed account closure, regardless of what our service providers do by default. Your financial data is not held by us at all, so there is nothing on our side to retain for that — it stays in your control until you choose to delete it. Beyond our own commitment, here's what's actually true about each underlying piece, sourced from each provider's own documentation:
The service providers involved — Supabase, Google, and Resend — may process data on servers outside India. As of this writing there is no government-published list of restricted countries under DPDP that would affect these transfers.
For any privacy question, request, or complaint, email hello@trouper.in. Please use a clear subject line such as "Privacy concern — CashLog" so it is routed quickly. This is a real, monitored inbox.
See also the CashLog Terms of Use, or return to the CashLog app.