Cavent: Privacy Notice for Testers
Who runs this
Cavent is a personal project run by Joshua Perrett, trading as Cavent. It is not a commercial product. It is used by me and a small group of people I have invited personally.
I am the "data controller" for what you put in, which just means I am responsible for looking after it. I am registered with the Information Commissioner's Office: ZC264506.
Questions or requests: support@cavent.uk.
The short version
- You type your financial information in. I store it so the app can add it up and show it back to you.
- Cavent never connects to your bank, never holds bank logins, and cannot move money.
- I don't sell your data, share it with advertisers, or use it for anything except running the app for you.
- I can see your data. It sits in a database I run. I won't go looking, but I would rather tell you than let you assume otherwise.
- You can export everything, or delete your account and all of it, from Settings at any time.
What is stored
- Your account: email, name, and a securely hashed password (or your basic Google profile if you sign in with Google).
- What you enter: accounts, balances, pots, assets, debts, money owed, spending, budgets, income and tax settings, plans and trips, including the names of anyone you add for splitting bills or plans.
- Security settings: if you turn them on, your two-factor and app-lock details (stored encrypted or hashed, never readable).
- Notifications: if you allow them, a device address so reminders can reach you, and your notification preferences. Reminders never contain amounts or balances, because they can show on a locked screen.
- Sign-in protection: your IP address and email, kept briefly to stop repeated failed sign-in attempts.
- Anything you email me.
Please don't type bank card numbers, account numbers or passwords into any free-text field.
Why I'm allowed to use it
To provide the app you asked to use, and to keep it secure. Nothing else. There are no automated decisions about you, and Cavent is not financial advice: it adds up what you enter, it doesn't tell you what to do with your money.
Who else handles it
A few services run the app for me and only act on my instructions:
| Service | What for |
|---|---|
| Neon | The database (EU/UK) |
| Vercel | Hosting the app |
| Resend | Sign-up and password emails |
| Inngest | Scheduled jobs, such as posting your monthly salary |
| logo.dev | The small bank and shop logos |
| Zoho Mail | My inbox, if you email me |
| Sign-in, only if you choose it | |
| Your phone's or browser's push service (Apple, Google, Mozilla or Microsoft) | Delivering reminders, only if you allow notifications |
Some of these are US companies. Where their staff might access data, standard UK-approved contract terms apply.
How long it's kept
For as long as your account is open. Delete your account and your data goes from the live app straight away and from backups within 30 days.
Security
Passwords are hashed, traffic is encrypted, every request is checked against your own account, and you can add two-factor sign-in and a Face ID or PIN lock. There has been no professional security audit: this is a small private project. Nobody can honestly promise perfect security, but there is nothing in Cavent that can take money out of your account.
Your rights
You can ask to see, correct, export or delete your data, or object to how it's used. Most of this you can do yourself in Settings. Otherwise email support@cavent.uk and I'll reply within a month. If you're unhappy, you can complain to the ICO at ico.org.uk or on 0303 123 1113, though I'd appreciate the chance to sort it first.
You must be 18 or over to use Cavent.
Effective from 9 October 2026.