Cash App
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They collect IDs, biometrics, money data, and location, train AI on it, run ads, and keep records after you leave.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
They collect IDs, SSN, face scans, bank details, contacts, precise location, and device activity.
Read the exact line
Privacy policy
“Your full mailing address; date of birth; government-issued identification, including Social Security number, passport, or driver’s license; and photographs, facial scan and biometric information extracted from such images for verification purposes.”
Training
They use your data to run payments, fight fraud, advertise, build profiles, and train AI models.
Read the exact line
Privacy policy
“Improving, personalizing and facilitating your use of our Services, content and applications, including by training artificial intelligence (AI) and other machine learning models;”
Sharing
Affiliates, payment partners, merchants, and ad companies can get your information.
Read the exact line
Privacy policy
“Starting on or after February 9, 2026: In connection with our commerce media network, we may share your information such as interest categories, masked identifiers, and device data, with advertising technology providers”
Kept
They keep data while you use Cash App and can keep it after you close the account.
Read the exact line
Privacy policy
“Even after you close your account, we can retain information about you and any transactions or Services in which you may have participated for a period of time that is consistent with certain criteria”
Controls
You can close the account, limit location, and opt out of some ads in Privacy settings.
Read the exact line
Privacy policy
“If you are a Cash App customer and would like to opt out of (or where required by applicable law, opt into) targeted advertising and related data sharing in connection with our commerce media network, you can visit “Account & Settings” in your account and click “Privacy.””
Fine print
They take a lasting license on uploads, can change the rules.
Read the exact line
Terms of service
“You grant us and our subsidiaries, affiliates, and successors a worldwide, non-exclusive, , fully-paid, transferable, , , and right to use, reproduce, modify, adapt, publish, prepare derivative works of, distribute, publicly perform, and publicly display your Content”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of targeted ads and related sharing
Account & Settings in your account, then Privacy; or “Your Privacy Choices” in the website footer
Limit precise location
Your phone’s privacy and location settings, or uninstall the app
Close your account
Log into Cash App and visit https://cash.app/support
Turn off promotional emails and texts
Unsubscribe links in emails, reply STOP to texts, or notification settings in the app
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They say they can use your information to train AI. The policy does not describe a way to turn that off.
Read the exact line
Privacy policy
“Improving, personalizing and facilitating your use of our Services, content and applications, including by training artificial intelligence (AI) and other machine learning models;”
For example, details from how you use Cash App could be used to teach their AI systems.
They take photos and face scans and treat that as biometric data to check who you are.
Read the exact line
Privacy policy
“photographs, facial scan and biometric information extracted from such images for verification purposes.”
For example, when you verify your account they may scan your face from an ID photo.
They can collect your exact location from your device, not just a rough city.
Read the exact line
Privacy policy
“This may include precise geolocation information.”
For example, the app may know the street-level location of your phone.
They also get data about you from ad companies and data brokers, not only from you.
Read the exact line
Privacy policy
“Information about you may be collected from third party partners such as advertisers, data brokers, or advertising platforms.”
For example, an ad network might send them inferred interests to add to your profile.
Starting in 2026 they can use your shopping and card activity to show ads for other brands.
Read the exact line
Privacy policy
“we may use data about your activity, such as your shopping history, app browsing behavior, card transactions, and general location information to show you personalized advertisements for other brands outside of Cash App.”
For example, a coffee shop purchase could be used to show you ads for another brand on other sites.
If you upload photos or other content, they get a lasting right to use it almost any way, including passing that right to others.
Read the exact line
Terms of service
“You grant us and our subsidiaries, affiliates, and successors a worldwide, non-exclusive, , fully-paid, transferable, , , and right to use, reproduce, modify, adapt, publish, prepare derivative works of, distribute, publicly perform, and publicly display your Content throughout the world in any media for any reason”
For example, a photo you add to your profile could still be used in their systems after you leave.
Closing the account does not wipe everything. They can keep records for law, fraud, fees, and disputes.
Read the exact line
Privacy policy
“Even after you close your account, we can retain information about you and any transactions or Services in which you may have participated for a period of time that is consistent with certain criteria”
For example, old payments may stay in their files years after you close Cash App.
They build a lasting profile about your money habits and preferences.
Read the exact line
Privacy policy
“Drawing inferences from any of the information we collect to create a profile about you that may reflect, for example, your credit risk profile, your preferences, characteristics, shopping habits, and other behavior”
For example, they may infer shopping habits from your card use and keep that in a profile.
If they change the privacy rules and you keep using Cash App, they treat that as you agreeing.
Read the exact line
Privacy policy
“If you keep using our Services, you consent to any amendment of this Privacy Notice.”
For example, after they post a new notice, opening the app later can count as accepting it.
They say they use basic security safeguards, but they do not promise the internet is fully safe.
Read the exact line
Privacy policy
“We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction.”
For example, they store data with safeguards, yet they still warn hackers could get in.
You can turn off promo emails and push ads, but they can still send account and payment messages.
Read the exact line
Privacy policy
“You can opt out of receiving in-app push notifications or emails containing promotional messages from us by following the instructions on screen or by following the instructions in those emails.”
For example, you can unsubscribe from marketing email and still get payment receipts.
Words to know
Legal words from the lines above, in plain English.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- opt in
- Something is off until you actively say yes to it. For example, marketing emails that only start after you tick a box are opt in.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
How we got here · grade F · score 30/100 · 16 of 16 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect far more than login and payments: government IDs, SSN, contacts, precise location, device IDs, employment details, and data from brokers.
Does it record your voice, face or body, and what happens to that?
They collect photos, facial scans, and biometric data from those images to verify you, and they keep call recordings from support.
Are your chats and uploads used to train AI models, and is that off by default?
They say they use information to train AI and machine learning models. The policy does not describe a way to opt out of that training.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and third-party partners use cookies for targeted ads across other sites, and they get data from advertisers and data brokers.
Do they sell or share your data, and can you opt out?
They share with affiliates, merchants, and ad partners, including a “share” for targeted ads, and they describe an opt-out in Privacy settings.
What rights do they take over what you type and what the AI makes?
You keep rights in content you upload, but you give them a worldwide, perpetual, irrevocable, sublicensable license to use it for any reason.
How long do they keep your data after you delete it, and can you delete it in the app?
You can close the account through support. They keep records after closure as needed for law, fraud, and disputes, with no short in-app wipe deadline.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build profiles about credit risk, preferences, and shopping habits. The policy does not describe viewing, editing, or turning that profile off.
Do they commit to basic security, and have they leaked data?
They describe reasonable technical and physical safeguards and link to a security page, but they do not guarantee no breaches.
Is there a real age gate, and are teens protected?
Main accounts must be 18+. Kids under 13 need a parent, and sponsored teen accounts need a parent or guardian. They do not describe a separate age-check tool beyond identity checks.
Can you sue or join a class action if things go wrong?
Mandatory arbitration and a class-action waiver, no opt-out
Will they tell you when the rules change, and is the policy specific?
The privacy notice is dated. They say they will give reasonable prior notice of material changes, and keeping using the app means you accept.
Can they close your account without warning, and can you get your data out first?
They can suspend or cancel cards and services at their discretion, and they say a Cash App Card may be canceled without notice.
If something goes wrong, who pays?
The terms point to a section that limits their liability and include many “we are not responsible” lines, including for cards and bitcoin.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 6,106 words at a professional or legal expert level (Flesch reading ease 6.3); the terms are 49,824 words at a college graduate level.
