Security and privacy

• Access rules live in the database. Every table that holds your records has row-level security, so a request can only read rows your account is allowed to see, whatever the screen asks for.
• In a shared space, you only see what your role allows, and a private account stays private to you.
• Recorded transactions are never edited or deleted. Corrections are added as reversals, so there is always an audit trail.
• Files you upload live in private storage, and are readable only by people with access to that space.
• Passwords are handled by our authentication provider. Password-reset links work once and expire after an hour, and a reset signs your other devices out.
• Your session cookie is kept separate from any other application, so being signed in elsewhere never signs you in here.

• It never asks for your bank password and does not scrape bank sites.
• It does not see your card number. Payments, when they launch, use the payment provider's own checkout.
• It cannot move money or pay bills.
• It does not sell your data.

No online service is perfectly secure. We cannot promise it, and we have not claimed any security certification or regulatory approval. If you find a vulnerability, tell us through Contact us and choose Something is broken, without sharing it publicly first.

• Use a unique password and log out on shared devices.
• Never share a reset link.
• Tell us straight away if you suspect someone else has used your account.