Security and privacy
How your data is protected
This translation was produced automatically and hasn't been reviewed yet.
The short answer is: the app has absolutely no access to the money in your bank, and your records are protected every step of the way — during transmission, on the server's disk, and in backups.
In Transit
All communication between the app and the server goes over TLS — the same protocol that secures payments in online stores. The server will not respond over an unencrypted channel.
On the Server
The server's disk is fully encrypted: without the key entered when the machine is turned on, neither the database, nor backups, nor attachment files can be read from it. The key is not stored on the server — this means that after a reboot, it has to be entered manually.
Passwords are not stored at all: their irreversible hash is stored in the database, from which the password cannot be recovered.
In Backups
Each team backup is encrypted before writing and is useless without the key — including for the person who gets the file itself. More about backups and recovery — in the article "Team Backups".
Login
In addition to a password, you can enable two-factor authentication (code from an authenticator app), PIN code by inactivity in the web version, and passcode with biometrics in the mobile app. The list of active sessions is visible in the settings, and any of them can be closed.
What We Collect About You
- Your transactions are not sold or transferred anywhere. Sending data to external AI services is only possible where you have given separate consent (voice input, receipt scanning, explanation of notifications), and even then, aggregates and anonymized labels are sent, not a dump of your history.
- Crashes. App errors are logged into our own crash tracking system, and amounts, account names, transaction descriptions, and the text of your notes are removed from them — only what is needed for fixing remains.
- In the mobile app, anonymized screen usage statistics may be collected (which section was opened) — without amounts, names, or transaction contents.
Your Data — Yours
You can export everything at any time and on any plan — see the article "Export My Data". Account deletion is irreversible and erases the data of teams you own; you are warned about this twice before being asked for confirmation.