8 Total
5 High severity
3 Medium severity
0 Low severity
Summary

This is Cash App's privacy policy, which explains exactly what personal information — including your Social Security number, facial scans, bank account numbers, precise location, and transaction history — Cash App collects, shares with partners and data brokers, and uses to build behavioral profiles about you. The most important thing for everyday users is that Cash App explicitly states it uses your personal data to train AI and machine learning models, and purchases additional data about you from third-party data brokers to build advertising profiles, without a clear opt-out mechanism described in the main policy. California residents and users in states with biometric privacy laws should review their rights under the 'Additional Information for Residents of Certain U.S. States' section and consider limiting permissions such as precise location and contact list access in their device settings.

Technical Summary

This Privacy Notice, effective March 11, 2026, governs Block, Inc.'s (Cash App) collection, use, disclosure, and retention of personal information from US users of the Cash App mobile application and website, operating under a consent-based framework whereby continued use of the Services constitutes agreement to the described data practices. The Notice creates significant obligations for Cash App to collect extensive categories of personal data including government-issued identification, Social Security numbers, biometric/facial scan data, precise geolocation, financial account numbers, employment information, and behavioral profiles, while disclosing this data to affiliates, credit bureaus, fraud partners, merchants, advertising partners, and data brokers. Notable provisions include the use of user data to train AI and machine learning models, collection of inferred characteristics from third-party data brokers to build behavioral profiles, and the sharing of biometric information for identity verification — practices that deviate from minimal-collection norms and create heightened risk under state biometric and consumer privacy laws. The document engages the GLBA, FCRA, CCPA/CPRA, state biometric privacy laws (including BIPA), COPPA, and FTC Act Section 5, with primary enforcement exposure from the CFPB (as a financial services provider), FTC, and State Attorneys General; material compliance considerations include the adequacy of consent mechanisms for biometric data collection, the lawfulness of using customer data for AI model training without explicit opt-in, and the breadth of third-party data broker sourcing and advertising profiling.

Evidence Provenance
Captured April 19, 2026 06:04 UTC
Document ID CA-D-000076
Version ID CA-V-000665
Wayback Machine View archived versions →
SHA-256 53b51c035e73ef9668f8d4fe32e8ba0b4cbd69d7b90f42ca9d06a090aba911d8
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

5 changes analyzed since monitoring began.

What changed Cash App updated their Cash App Privacy Policy on April 18, 2026. Change detected: 1 sentence(s) modified. Document contained 193 sentences after update.
Consumer impact Cash App has added a 'Your Privacy Choices' link to the footer of their privacy policy, making it easier for users to locate and exercise their privacy preferences. This is particularly relevant for California residents and others in states with privacy opt-out rights, as it provides a more visible access point for those controls. You can click the 'Your Privacy Choices' link in Cash App's privacy policy footer to review and manage your data preferences.
Why it matters Adding a 'Your Privacy Choices' link makes it easier for users — especially California residents and those in other states with privacy opt-out rights — to find and exercise control over how their data is used. While minor, it signals Cash App is actively maintaining compliance with US state privacy laws.
What changed Cash App updated their Cash App Privacy Policy on April 10, 2026. Change detected: 1 sentence(s) added, 4 sentence(s) modified. Document contained 193 sentences after update.
Consumer impact Cash App has shifted from prohibiting all use by children under 13 to allowing it with parental authorization, meaning parents can now set up or approve accounts for their children. Only accounts opened by minors without parental authorization will be deleted if discovered — authorized child accounts are permitted. You can review the new Privacy Notice for Children linked in the updated policy to understand how your child's data is handled.
Why it matters This change means Cash App is now open to children under 13 for the first time — provided a parent or guardian authorizes the account — which is a significant expansion of its user base with serious COPPA compliance implications. Parents should be aware that their authorization is now required and should review the new Privacy Notice for Children to understand how their child's data will be used.
What changed Cash App updated their Cash App Privacy Policy on April 03, 2026. Change detected: 1 sentence(s) removed, 1 sentence(s) modified. Document contained 192 sentences after update.
Consumer impact Cash App reorganized the introductory header of its Privacy Notice on April 3, 2026, merging the document title and effective date annotation into a single line. This is a presentational change only and does not alter any data collection, sharing, or user rights provisions. No action is needed in response to this change.
Why it matters This change is purely presentational and does not affect how Cash App collects, uses, or shares user data. Users do not need to take any action.
What changed Cash App updated their Cash App Privacy Policy on April 02, 2026. Change detected: 1 sentence(s) modified. Document contained 193 sentences after update.
Consumer impact Cash App removed a navigation link to the older Terms of Service that applied to accounts created before June 24, 2021. Users with legacy accounts can no longer easily find these terms through the Privacy Policy document. If you created your Cash App account before June 24, 2021, you may want to search Cash App's website directly or contact support to obtain the legacy terms that govern your account.
Why it matters Users who created Cash App accounts before June 24, 2021 may be governed by different terms than current users, and removing the direct link makes those terms harder to find and reference. This could affect their ability to understand their rights, fees, or dispute resolution options under the terms that actually apply to them.
What changed Cash App updated their Cash App Privacy Policy on March 25, 2026. Change detected: 1 sentence(s) modified. Document contained 193 sentences after update.
Consumer impact Cash App removed the 'Your Privacy Choices' link from its Privacy Policy, which previously gave users a visible and accessible way to opt out of the sale or sharing of their personal data. This makes it less straightforward for users — especially California residents with CCPA rights — to find and exercise their data privacy preferences. You can try navigating to Cash App's account settings or contacting their support directly to exercise your opt-out rights.
Why it matters The 'Your Privacy Choices' link is a legally significant consumer opt-out mechanism under California privacy law, and its removal makes it harder for users to exercise their data rights. California residents in particular may find their CCPA/CPRA opt-out rights effectively obscured if no equivalent link is provided elsewhere.

Recent Clause-Level Changes Apr 18, 2026

8 provisions unchanged.

View full change record →
High Severity — 5 provisions
Medium Severity — 3 provisions

Cross-platform context

See how other platforms handle AI and Machine Learning Model Training Using Customer Data and similar clauses.

Compare across platforms →

Applicable Regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GLBA
United States Federal
TCPA
United States Federal