Cash App states it may share your personal information with its parent company Block, Inc. affiliates including Square and other business units within the Block corporate group.
This analysis describes what Cash App's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy identifies internal affiliates including Square as a category of entities with whom personal data collected through Cash App may be shared, which means data provided to Cash App may flow across Block's broader suite of business and financial services products.
Interpretive note: The notice does not specify which data categories are shared with specific affiliates or the purposes for which each affiliate uses the data, creating ambiguity about the full scope of intragroup sharing.
The updated policy establishes that children under 13 may use Cash App services if a parent or guardian signs up for or authorizes the account on their behalf. Previously, the policy explicitly prohibited any use by children under 13. The revised language clarifies that data deletion obligations apply when Cash App learns an account belongs to an unauthorized child under 13, but does not specify what happens to data from authorized child accounts or how parental oversight operates. A separate Privacy Notice for Children is referenced but not included in the change summary.
View change record →The revised policy shifts from prohibiting all children under 13 from using Cash App to permitting use when a parent or guardian explicitly authorizes or signs up for the service on the child's behalf. This creates a new lawful use path for families, but also establishes a distinction between authorized and unauthorized child accounts. The policy states that if a child under 13 operates an unauthorized account, Cash App will delete collected data upon discovery. Parents or guardians who authorize services should review the new Privacy Notice for Children for details on how child data is processed.
View change record →The updated terms state that children under 13 can no longer use Cash App, eliminating a path that previously existed for parents to authorize accounts on behalf of younger children. The revised language no longer references a separate Privacy Notice for Children, consolidating all child data handling disclosures into the main policy. If Cash App collects data and later learns it came from a child under 13, the policy requires deletion of that data, though the updated language broadens this obligation by removing the phrase 'for an unauthorized account', potentially extending deletion requirements beyond accounts that were never authorized.
View change record →New explicit disclosure specifying data sharing with Square and other affiliated business units, clarifying corporate data flows within Block's ecosystem.
View full change record →The policy states that personal information collected through Cash App may be shared with Block, Inc. group companies including Square; users should be aware that data provided in the context of personal payments may be accessible across Cash App's affiliated business services platforms.
How other platforms handle this
If you registered to use Notion's Services with such an email address, but you do not use the Services in connection with your organization...you may transfer your account to a different email address.
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"Our group companies, including our other business units such as Square, or affiliatesExcerpt from Cash App's Privacy Policy
1) REGULATORY LANDSCAPE: Intragroup data sharing within a financial services group engages GLBA, which permits sharing of nonpublic personal information with affiliated entities subject to notice and, in some cases, opt-out requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy identifies internal affiliates including Square as a category of entities with whom personal data collected through Cash App may be shared, which means data provided to Cash App may flow across Block's broader suite of business and financial services products.
The policy states that personal information collected through Cash App may be shared with Block, Inc. group companies including Square; users should be aware that data provided in the context of personal payments may be accessible across Cash App's affiliated business services platforms.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cash App.