For certain Cash App services related to staff management, the policy states that Cash App may collect your employee ID, job title, salary, paystubs, work schedule, timecard data, and benefits enrollment information.
This analysis describes what Cash App's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The collection of salary information, paystubs, benefits enrollment data, and timecard records represents a category of sensitive financial and employment data that extends beyond standard payment app data collection and may interact with payroll data privacy requirements and GLBA depending on use.
Interpretive note: The applicability of HIPAA to benefits enrollment data and the scope of state employment privacy law requirements for this collection depend on the specific services and jurisdictions involved.
The updated policy establishes that children under 13 may use Cash App services if a parent or guardian signs up for or authorizes the account on their behalf. Previously, the policy explicitly prohibited any use by children under 13. The revised language clarifies that data deletion obligations apply when Cash App learns an account belongs to an unauthorized child under 13, but does not specify what happens to data from authorized child accounts or how parental oversight operates. A separate Privacy Notice for Children is referenced but not included in the change summary.
View change record →The revised policy shifts from prohibiting all children under 13 from using Cash App to permitting use when a parent or guardian explicitly authorizes or signs up for the service on the child's behalf. This creates a new lawful use path for families, but also establishes a distinction between authorized and unauthorized child accounts. The policy states that if a child under 13 operates an unauthorized account, Cash App will delete collected data upon discovery. Parents or guardians who authorize services should review the new Privacy Notice for Children for details on how child data is processed.
View change record →The updated terms state that children under 13 can no longer use Cash App, eliminating a path that previously existed for parents to authorize accounts on behalf of younger children. The revised language no longer references a separate Privacy Notice for Children, consolidating all child data handling disclosures into the main policy. If Cash App collects data and later learns it came from a child under 13, the policy requires deletion of that data, though the updated language broadens this obligation by removing the phrase 'for an unauthorized account', potentially extending deletion requirements beyond accounts that were never authorized.
View change record →New comprehensive disclosure of employment data collection through staff management features, including sensitive payroll and scheduling information.
View full change record →The policy states that employment information including salary, paystubs, benefits enrollment, and timecard data may be collected for staff management features; users who are employees whose data is processed through Cash App's employer-facing tools should be aware this data is collected and retained subject to the terms of this notice.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Employment information. In order to provide you with certain Services, such as staff management features, we may also need to collect your employee identification number, job title, salary information, hire date, paystub, work schedule, timecard information, and benefits enrollment information.Excerpt from Cash App's Privacy Policy
1) REGULATORY LANDSCAPE: Collection and processing of salary, benefits, and payroll data engages state payroll data privacy statutes and may interact with GLBA where this data is used in financial product eligibility determinations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The collection of salary information, paystubs, benefits enrollment data, and timecard records represents a category of sensitive financial and employment data that extends beyond standard payment app data collection and may interact with payroll data privacy requirements and GLBA depending on use.
The policy states that employment information including salary, paystubs, benefits enrollment, and timecard data may be collected for staff management features; users who are employees whose data is processed through Cash App's employer-facing tools should be aware this data is collected and retained subject to the terms of this notice.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cash App.