Your password is never stored
It is hashed with argon2id. Even we can't see it or send it to you.
Security
Your financial ledger is something you have to be able to trust
This page says what protects your account and, more important, what we never do. Every line is something the app does today.
What we do
Eight layers, each with one job
Two-factor sign-in
Switch it on with any one-time-code app (TOTP). It comes with recovery codes, so a lost phone doesn't lock you out of your ledger.
Auto-lock
Leave the app idle for a few minutes and it locks until you enter your password; you set how long.
Ledgers are kept apart
Each household or business is its own workspace and the app only reads that workspace's data. One ledger's data never leaks into another.
You decide who can do what
Each member gets a role and their own access switches. A "private" transaction is seen only by whoever recorded it.
Every important change is recorded
The activity log keeps who changed what and when, so disagreements can be traced.
Receipts only for members of that ledger
A receipt image is stored under a random name and shown only to someone who is signed in and belongs to that ledger.
Encrypted connections
All traffic between your browser and our servers uses HTTPS, and your browser is told to always use it.
What we don't do
Things this service never does
These matter as much as the mechanisms.
- We don't connect to your bank account or read transactions from a bank; every figure is one you recorded.
- Your card details never reach our servers.
- We don't sell your data or give it to anyone for advertising.
- Site staff can't see your individual financial transactions; only general things such as the number of members and the subscription status.
- We have no advertising cookies or third-party trackers; only the cookies needed for sign-in, language and the active ledger.
- When a subscription ends we delete nothing and don’t hold your ledger hostage; you can always take a full copy of your data.