Security and your data

PIN

Settings → Security. The app can be locked with a PIN, and with a fingerprint or Face ID where the device supports it. The PIN itself is not stored — only a hash of it — so it cannot be recovered, by us either.

What is stored

Your transactions, accounts, categories and goals. Card numbers, bank passwords and access to bank accounts are never asked for and never stored — there is no bank synchronisation.

Photographs

Your avatar, wallpaper and goal photos live in a private store and are served only to you, through the app's own address. There is no direct link that could be forwarded.

Shared access

Inviting somebody grants full access to all of the budget's financial data. It can be taken back at any moment and stops immediately.

Deleting your account

Settings → delete account. Everything goes: transactions, accounts, goals, files and the account itself. This cannot be undone and no copy is kept. Exporting your data first is worth the minute it takes.

What the PIN actually closes

Four to eight digits. Asked at launch and after five minutes in the background. If the phone supports it, a fingerprint or face unlocks it.

The app states the boundary honestly: the code protects the app from whoever picks up your phone. It is not a replacement for the screen lock and not a second password on the account — anyone who knows the account password signs in from another device without the code.

Attempts are limited: after several wrong ones the app asks you to wait.

What we do not ask for and do not know

We do not connect to banks and ask for no account access. The app does not know where your money is — it knows only what you recorded. That is slower than automatic syncing, and it means touching your money is physically impossible for it.

Card numbers are needed nowhere. A card here is a name, a limit and some dates; the sixteen digits are not something we hold or have anywhere to hold.

Deleting the account

By a button, from settings, with no email to support. The app lists exactly what goes: every transaction, category, budget and report; accounts, cards, goals, debts, assets and recurring transactions; uploaded photos — avatar, background, goal photos; settings, consents and the entry code.

To confirm you type the word DELETE — not tick a box, type it. After that there is no way back: it cannot be restored through support or otherwise, and signing up again with the same email creates a new, empty account.

Before deleting it is worth exporting the transactions to CSV; that is one tap.

If somebody else has access

The "Shared access" section shows who can reach your budget, with a "Revoke" button beside them. Access disappears immediately, and everything that person recorded stays with you.

How manual tracking differs from an app wired into your bank, and the four questions worth asking either of them — is it safe to track your money in an app.