Legal
Privacy policy
Last updated 1 September 2026
This policy explains how Universal Cashback (Pvt) Ltd (“we”, “us”) handles information when you use the Cash Wallet mobile app, the brand portal, and cashback.devspire.co.
Data we collect
- Account details: name, phone, email, password hash, and Google account email if you use Google sign-in.
- Wallet and payout details: bank title, bank name, IBAN or account number, and withdrawal requests.
- Device data: device name, IP address, session tokens, optional fingerprint-unlock preference stored on your device, and a Firebase push token if you enable alerts.
- Transaction and cashback history created when you shop at participating brands.
- Support messages you send in the app.
How we use it
We use this data to create your wallet, verify your identity with one-time codes, pay cashback, process bank withdrawals, prevent fraud, send optional cashback alerts, and provide support. We do not sell your personal data.
Sharing
We share data with infrastructure providers that host the service (database, email/SMTP, object storage, and Firebase Cloud Messaging) and with banks or payout operators only as needed to send your withdrawal. Brand partners receive purchase and cashback data for their own stores, not your bank details.
Retention
We keep account, ledger, and payout records for as long as your account is open and for the period required by Pakistani financial-record rules after closure. Session tokens expire. Push tokens are removed when you sign out or disable alerts.
Your rights
You can edit your name in Settings, sign out of devices, and request account deletion at /account-deletion. Email cashwallet.devspire@gmail.com for a copy of your data or a correction.
Contact
Universal Cashback (Pvt) Ltd
Email: cashwallet.devspire@gmail.com