Encrypted in transit and at rest
All traffic runs over HTTPS, and the database is encrypted at rest by the infrastructure provider.
Security & privacy
How we protect your financial data
A budget is sensitive. The app is built so that only your account can see your transactions — and so that we never touch your payment details at all.
Core principles
Row-level security
Every database row is tied to your account ID and protected by row-level security policies. Without your signed-in session, no other user can reach it.
Payments handled by Stripe
Card numbers never pass through or get stored on our servers. Checkout and subscription management run on Stripe, a PCI DSS certified provider.
AI runs server-side
The AI coach works with your data on the server and answers only you. We do not hand your transactions to third parties for model training.
Your account, your data
Cancel your subscription anytime and keep your data. If you ask for account deletion, we remove your records from the database.
Email or Google sign-in
Passwords are stored only as hashes. If you sign in with Google, no password is created here at all.
Found a security issue?
Get in touch and tell us what you found. We prioritise vulnerabilities — we only ask that you hold off on public disclosure until a fix ships.
This page describes how the app works today. It is not a certification or a legally binding document.
Start budgeting today
The Basic plan is free and card-free. English, Slovak and Czech — in euros or korunas.