Security

Last checked 23 October 2026

Your data stays on your device

Our apps keep everything you type in your browser's storage, on your device. There are no accounts, no passwords and no bank connections. Backups are files you download and keep yourself.

The weekly usage count is separate from Sync. It carries no budget data and is off unless you switch it on. Privacy says exactly what it sends.

Sync between devices

Sync is optional and off until you switch it on. It works like this:

• Your device makes an eight-word code. You type it on your other device to pair them.
• Each device works out an encryption key from that code. Your data is encrypted on the device with AES-GCM-256 before it's sent.
• Our server, on Cloudflare, stores only the encrypted data. It never sees the code or the key, so it can't read your budget.
• Stop everywhere in the app deletes the server copy. Its encrypted backups go within 30 days.

Anyone with your eight-word code could open your synced data, so keep it private, like a key.

What Sync stores

• Encrypted data only. Your device encrypts everything before it leaves. The server keeps that encrypted copy and nothing it can read.
• Your device makes the keys. They're worked out on your device from the eight-word code. The server never sees the code or the keys.
• No accounts and no emails. Sync never asks for a name, an email address or a password.
• Backups for 30 days. Nightly backups of the encrypted data are kept for 30 days, so the service can be restored if something breaks. We can't read them either.
• A kill switch. One switch on the server pauses Sync for everyone at once. While it's paused, the apps keep working on your device and say that Sync is paused.

Reporting a problem

If you think you've found a security problem in our apps, Sync or this site, email hello@neatwrenstudio.com with what you found and how to see it. We reply within two working days.