Cash App
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for ads and shared with data brokers.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Cash App collects ID, money, location, contacts, and face data, trains AI on it, shares for ads, and keeps it after you leave.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
- Shares data with data brokers
Collected
They collect ID, SSN, bank cards, face scans, contacts, precise location, and device data.
Read the exact line
Privacy policy
“Additional Identification Information, such as: Your full mailing address; date of birth; government-issued identification, including Social Security number, passport, or driver’s license; and photographs, facial scan and biometric information extracted from such images for verification purposes.”
Training
They use your data to run payments, fight fraud, advertise, build profiles, and train AI models.
Read the exact line
Privacy policy
“Improving, personalizing and facilitating your use of our Services, content and applications, including by training artificial intelligence (AI) and other machine learning models;”
Sharing
Other users, Square affiliates, banks, ad platforms, and data brokers can get pieces of your data.
Read the exact line
Privacy policy
“Information about you may be collected from third party partners such as advertisers, data brokers, or advertising platforms.”
Kept
They keep data after you close the account for law, fraud, fees, and disputes, with no set end date.
Read the exact line
Privacy policy
“Even after you close your account, we can retain information about you and any transactions or Services in which you may have participated for a period of time that is consistent with certain criteria”
Controls
You can close the account, limit location, and opt out of some ads in Account & Settings.
Read the exact line
Privacy policy
“If you are a Cash App customer and would like to opt out of (or where required by applicable law, opt into) targeted advertising and related data sharing in connection with our commerce media network, you can visit “Account & Settings” in your account and click “Privacy.””
Fine print
They take a license on your content, can change terms.
Read the exact line
Terms of service
“You grant us and our subsidiaries, affiliates, and successors a worldwide, non-exclusive, , fully-paid, transferable, , , and right to use, reproduce, modify, adapt, publish, prepare derivative works of, distribute, publicly perform, and publicly display your Content”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of commerce-media targeted ads
Account & Settings in the app, then Privacy
Stop sharing phone contacts
Update your settings in Cash App (contacts sharing)
Limit precise location
Your phone’s location settings, or uninstall the app
Close your account
Log in and visit https://cash.app/support
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They say they can use your information to train AI. The notice does not give you a switch to turn that off.
Read the exact line
Privacy policy
“Improving, personalizing and facilitating your use of our Services, content and applications, including by training artificial intelligence (AI) and other machine learning models;”
For example, support chats or how you use the app could be used to train their models.
Signing up can mean they take your photo and extract face data to prove who you are.
Read the exact line
Privacy policy
“photographs, facial scan and biometric information extracted from such images for verification purposes.”
For example, a selfie for ID check can become stored biometric data tied to your account.
They can collect where your phone actually is, not just a city.
Read the exact line
Privacy policy
“This may include precise geolocation information.”
For example, they may log that you were at a specific store when you paid.
Your purchases and browsing can be used to show other companies’ ads about you.
Read the exact line
Privacy policy
“Starting on or after February 9, 2026: In connection with our commerce media network, we may use data about your activity, such as your shopping history, app browsing behavior, card transactions, and general location information to show you personalized advertisements for other brands outside of Cash App.”
For example, buying coffee with Cash App could later show you ads for that brand on other sites.
They say they do not “sell” in everyday language, but they do share data for targeted ads.
Read the exact line
Privacy policy
“While we do not sell personal information as that term is commonly understood, we “share” personal information for advertising purposes, using cookies and similar technologies to show you targeted ads about our Services across the internet.”
For example, ad companies can get identifiers so Cash App ads follow you around the web.
Anything you upload can be used forever, even if you leave, including to promote the app.
Read the exact line
Terms of service
“You grant us and our subsidiaries, affiliates, and successors a worldwide, non-exclusive, , fully-paid, transferable, , , and right to use, reproduce, modify, adapt, publish, prepare derivative works of, distribute, publicly perform, and publicly display your Content throughout the world in any media for any reason, including to provide, promote, and/or incorporate into the Services.”
For example, a photo you set as a profile picture could still be used in their systems after you close the account.
Closing the account does not mean they wipe your history on a set clock.
Read the exact line
Privacy policy
“Even after you close your account, we can retain information about you and any transactions or Services in which you may have participated for a period of time that is consistent with certain criteria, such as applicable law, applicable statute of limitations, or as we believe is reasonably necessary”
For example, old payments can stay on file for years for fraud or legal reasons.
They build a lasting picture of how you spend and how risky you look.
Read the exact line
Privacy policy
“Drawing inferences from any of the information we collect to create a profile about you that may reflect, for example, your credit risk profile, your preferences, characteristics, shopping habits, and other behavior”
For example, they may infer shopping habits from your card use even if you never filled out a profile.
They say they will warn you before big privacy changes, then keeping the app means you accept.
Read the exact line
Privacy policy
“We will provide you with reasonable prior notice of material changes in how we use your information, which may include notification through our app or website, or by email, if you have provided one.”
For example, a new ad use might show as an in-app notice before it starts.
They claim basic security steps but say they cannot guarantee no hacks.
Read the exact line
Privacy policy
“We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction.”
For example, they store data with themselves and vendors and point you to cash.app/security.
Words to know
Legal words from the lines above, in plain English.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- data broker
- A company that buys, collects and resells information about people, usually without ever meeting them. For example, your phone number and shopping habits can be sold as part of a list to a company you never heard of.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- opt in
- Something is off until you actively say yes to it. For example, marketing emails that only start after you tick a box are opt in.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
How we got here · grade F · score 27/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect far more than login and payments: SSN, government ID, face scans, contacts, precise location, employment, and partner data.
Does it record your voice, face or body, and what happens to that?
They collect photos, facial scans, and biometric data from images for identity checks, and may record support calls.
Are your chats and uploads used to train AI models, and is that off by default?
They say they train AI and machine-learning models on information they collect. No training opt-out is described.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use cookies for targeted ads across the web and get data from advertisers and data brokers.
Do they sell or share your data, and can you opt out?
They share with affiliates, vendors, and ad partners and offer an opt-out for commerce-media targeted ads.
What rights do they take over what you type and what the AI makes?
You keep rights in your content, but you grant a perpetual, irrevocable, sublicensable license for any reason, including promotion.
How long do they keep your data after you delete it, and can you delete it in the app?
You close the account via support. They still keep data as long as they think they need it for law, fraud, and disputes.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build credit-risk and behavior profiles. The notice does not describe viewing or turning that profile off.
Do they commit to basic security, and have they leaked data?
They describe reasonable administrative, technical, and physical safeguards and link to a security page, with no guarantee.
Is there a real age gate, and are teens protected?
Main accounts must be 18+. Under-13 needs a parent. Teens and kids can use sponsored accounts if a parent authorizes.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. They promise reasonable prior notice of material privacy changes, then continued use means you accept.
Can they close your account without warning, and can you get your data out first?
They can suspend or cancel cards and accounts at their discretion, including without prior notice in places.
If something goes wrong, who pays?
The terms flag a liability-limit section and, for some features, you must cover their losses and legal costs.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 6,106 words at a professional or legal expert level (Flesch reading ease 6.3); the terms are 49,824 words at a college graduate level.
