Passkey encryption

Turn it on in Settings, Privacy. You create a passkey on your device, then see a 24-character recovery code. Save it somewhere safe and type it back to confirm. From then on every new receipt photo and statement PDF is stored as ciphertext.

What it protects

Someone with access to our storage gets ciphertext, not your receipts. Only your passkey, or your recovery code, can decrypt.

What it does not cover

• Vendor, amount, date and category are never encrypted. The app needs them to work.
• A photo is read in the clear for the few seconds the AI scans it, then encrypted. So this is encryption at rest, not encryption on every hop.

Lost device

Sign in on a new device, go to Settings, Privacy, enter your recovery code and add a new passkey. Lose every passkey and the code and the photos cannot be recovered. Your expense data and exports are unaffected.

Encryption cannot be turned off once on.

Full detail, including what a breach would and would not expose, is on the Security page.