Security
Last updated 21 Sep 2026
How we protect your account
- Encrypted connections — the website and app talk to our servers over HTTPS.
- Hashed passwords — passwords are stored using a strong one-way hash, never in plain text.
- Verified payments — every payment is signature-checked with our gateway before a plan is activated, and webhooks are verified before they are trusted.
- Rate limiting — sign-in and sign-up are rate-limited to slow down guessing attacks.
- Session control — see your active devices and sign out of any of them from your Profile.
- Audit trail — administrator actions are logged.
Your data stays with you
Your accounting records are stored on your own device. Use the app’s PIN lock to protect it, and keep regular backups.
Report a problem
Found a security issue? Please tell us through the Contact page so we can fix it quickly.