In-app Consent Flow

GOVERNING LANGUAGE NOTICE

This document is the English translation of the Hungarian In-app Consent Flow specification (HJ-001).

In case of any discrepancy between the Hungarian and English versions, the Hungarian version shall prevail.

Hungarian version: cashleticsapp.com/legal.php?lang=hu

ℹ Developer guide

The UI texts in this document are copy-paste implementable specifications.

Campaign/iOS-specific fields are finalised only when the relevant feature or campaign starts.

All consent events must be logged in Firestore as per the schema in HJ-001 Section 10.

⚠ Important: optional steps (2–5) are NOT conditions for using the app.

If the user declines steps 2–5, all core app features (financial tracking,

gamification, goals) remain fully accessible.

REGISTRATION START

↓

[ Step 1 ] Terms of Use + Privacy Policy → MANDATORY

├ Accepts → proceed to Step 2

└ Declines → registration aborted, app unusable

↓

[ Step 2 ] Health Connect / step count → OPTIONAL

├ Grants → step-count XP and challenges available

└ Skips → step-count features unavailable (can be enabled later)

↓

[ Step 3 ] Banking notification access → OPTIONAL

├ Grants → automatic transaction import available

└ Skips → manual entry required (can be enabled later)

↓

[ Step 4 ] Marketing push notifications (FCM) → OPTIONAL — future

├ Grants → challenge and reward notifications enabled

└ Skips → notifications off (changeable in Settings)

↓

[ Step 5 ] Analytics / AdMob tracking → OPTIONAL (Free users only)

├ Accepts → personalised ads and analytics enabled

└ Declines → non-personalised ads, analytics limited

└ PRO user → this step is skipped (no ads)

↓

HOME SCREEN — app fully accessible

[ SCREEN: Registration — Step 3 of 3 ]

────────────────────────────────────────────────

Accept Terms

To use Cashletics, you need to accept the following

documents. Please read them carefully.

[ ☐ ] I have read and accept the Terms of Use

and the Privacy Policy.

→ Terms of Use [link]

→ Privacy Policy [link]

────────────────────────────────

[ Create Account ] — active only when checkbox is ticked

[ Cancel ]

[ SCREEN: Step Count Tracking Setup ]

────────────────────────────────────────────────

Step Count Rewards

Cashletics can reward you based on your daily step count.

To do this, we need access to the Health Connect app

(Android), which manages your device's health data.

What we read:

• Daily step count (today's value only)

What we do NOT read:

• Heart rate, sleep data, weight or any other

health metric

We use this data solely to award XP points and

evaluate challenges. You can revoke this permission

at any time.

→ Privacy Policy — Health Data section [link]

────────────────────────────────

[ Open Health Connect ]

[ Skip — continue without step count ]

iOS / HealthKit currently inactive; to be updated before iOS launch

The iOS App Store HealthKit permission text must be provided separately in App Store Connect

under the NSHealthShareUsageDescription key.

Suggested text: iOS / HealthKit currently inactive; to be updated before iOS launch

[ SCREEN: Automatic Transaction Import ]

────────────────────────────────────────────────

Automatic Expense Tracking

Cashletics can automatically record your expenses

by reading your banking push notifications.

Important:

• The app reads ONLY the text of your notifications

• It does NOT access your bank account or login credentials

• Notification text is NOT sent to our servers — only

the parsed amount and merchant name are stored

• You can revoke this permission at any time

→ Banking Notification Consent Statement [link]

────────────────────────────────

[ Enable notification access ]

[ Skip — I will enter expenses manually ]

⚠ Future feature — FCM (Firebase Cloud Messaging) is NOT yet active.

This step is added to the consent flow only after FCM is activated.

Text prepared in advance. SZ-001 trigger: "when FCM is activated, implement this step".

[ SCREEN: Notification Settings ] — FUTURE

────────────────────────────────────────────────

Stay motivated with notifications!

Would you like us to notify you:

• when you are close to completing a challenge,

• when you have received a reward,

• when a friend overtakes you on the leaderboard?

You can turn off notifications at any time in

Settings → Notifications.

────────────────────────────────

[ Yes, enable notifications ]

[ No thanks ]

[ SCREEN: Personalisation and Statistics ]

────────────────────────────────────────────────

Help us improve Cashletics!

If you agree, we collect the following data:

• App usage statistics (Firebase Analytics)

• Advertising ID (GAID) — for personalised

ads (Google AdMob)

If you decline:

• Non-personalised ads will be shown

• Core app features are unaffected

→ Cookie & Tracking Policy [link]

────────────────────────────────

[ I agree ]

[ I decline ]

ℹ Developer note — logging withdrawal

Consent withdrawal must be recorded in Firestore with the same log entry format

as the original consent — with action: "revoked".

See: HJ-001 Section 10 — Firestore consent log schema.

The Firestore consent log schema is defined in HJ-001 (Hungarian version), Section 10.

The schema is identical for both language versions of the app — no duplication required.

Collection path: users/{userId}/consents/{consentId}

Key fields: consent_type | action | timestamp | app_version | document_version | platform

For full field definitions and consent_type values, refer to HJ-001 Section 10.