Security

Last checked 22 October 2026

Your data stays on your device

Our apps keep everything you type in your browser's storage, on your device. There are no accounts, no passwords and no bank connections. Backups are files you download and keep yourself.

Sync between devices

Sync is optional and off until you switch it on. It works like this:

• Your device makes an eight-word code. You type it on your other device to pair them.
• Each device works out an encryption key from that code. Your data is encrypted on the device with AES-GCM-256 before it's sent.
• Our server, on Cloudflare, stores only the encrypted data. It never sees the code or the key, so it can't read your budget.
• Stop everywhere in the app deletes the server copy. Its encrypted backups go within 30 days.

Anyone with your eight-word code could open your synced data, so keep it private, like a key.

Reporting a problem

If you think you've found a security problem in our apps, Sync or this site, email hello@neatwrenstudio.com with what you found and how to see it. A person replies within a day.