Your data is safe

Real security. Full transparency. You own your data.

Encryption & Security

  • Infrastructure-level encryption at rest (PostgreSQL + Railway)
  • TLS 1.3 for all data in transit
  • Application-level encryption for sensitive data (emails, tokens)
  • Bcrypt password hashing with secure salts

Infrastructure & Access

  • Hosted on Railway (Frankfurt, EU)
  • PostgreSQL managed database with automatic backups
  • Two-factor authentication (2FA) support
  • Session management with device-level revocation

DPA Compliance

  • Fully compliant with Philippines Data Privacy Act (R.A. 10173)
  • GDPR-aligned data handling practices
  • Data Processing Agreement available on request
  • Designated Data Protection Officer

Transparency

  • We never sell your data to third parties
  • No data shared with advertisers or analytics companies
  • Open about our security practices
  • Regular security audits planned

You own your data

Export anytime

Download all your transactions, budgets, and account data as CSV or PDF. No lock-in.

Delete permanently

Request full data deletion. We remove everything from our servers within 30 days.

Control access

Invite or remove members from your household at any time. Full audit log of changes.

Questions about our security?

Contact our Data Protection Officer at [email protected]