Cashvy Not out yet

Support

Something not working?

Three mailboxes, each read by a person. No ticket system and no chatbot. Most problems with joining a trip are answered below first; general questions are in the FAQ.

The most common one

  • It says the link has expired

    A link stops working fifteen minutes after it was made, if nobody has used it. Ask whoever sent it to make a new one — it takes them a tap.

  • It worked once, and not on a second device

    A link opens a trip for one browser, the first one to use it. To follow the trip on a laptop as well as a phone, ask for a second link.

  • It stopped working after it had been working

    The person keeping the trip can turn off any browser they let in, and may have. Ask them.

  • The six words don’t match theirs

    Stop, and tell them. Matching words are how you both know nothing is sitting between your browser and their phone. Don’t carry on past a mismatch.

  • I typed cashvy.app instead of opening the link

    Paste the whole link into the box on the homepage, or straight into your browser’s address bar.

Write to a person.

Something broken

Write to support@cashvy.app. Two things make an answer much faster, and the app fills them in for you if you write from Menu → Contact: which version you are running and which phone. Nothing else is prefilled — no device identifier and nothing at all from your ledger.

A security issue

security@cashvy.app is the disclosure address, and it is also published at /.well-known/security.txt. Please send it there rather than opening something public.

Two facts up front, so you are not waiting on them: there is no bug bounty and no service-level agreement, and the thing you are looking at is not a server — Cashvy has no account system and no database of users to breach. What is worth attacking is the browser-to-phone bridge, the capability checks that decide what a guest may do, and the money arithmetic.

Please include what you found and how to reproduce it. If it needs a response you can encrypt, say so and we will arrange one — there is no published key today, and claiming otherwise would be a claim you could not check.

What we cannot do.

We cannot see your ledger, recover it, reverse a settlement, or settle an argument about who owes what. That is not a policy — there is no copy of your data anywhere for us to look at.

Cashvy records who owes what. It does not move money. See Terms for the whole of that, and Privacy for what is stored and where.