How we protect your money and your data

1.In transit and at rest

In short: everything travels encrypted, is stored encrypted, and the key never sleeps next to the data.

• In transit. Every connection between your device and our server is encrypted (TLS). The browser is given security header rules that stop foreign code from loading in the page.
• At rest. Personal fields — transaction descriptions and merchants, the names of accounts, debts and goals — are encrypted one by one, not just the disk as a whole. A copy of the database that ended up in the wrong hands is an unreadable string without the key.
• The key kept apart. The encryption key is never stored in the same place as the database backups. The backups themselves are encrypted.
• Server in the European Union. Data lives in a data centre in Germany. The database is not reachable from the internet — only from the app's own server, which runs without administrator rights.

2.Your account

In short: a password nobody can read back, a second factor, and every device visible and revocable on its own.

• Password. We store only its one-way fingerprint (bcrypt). Even we cannot learn your password, only check it.
• Two-factor sign-in. Turn on one-time codes from an authenticator app (TOTP) in Settings, and a password alone gets nobody in.
• A new device asks for confirmation. Signing in from an unknown device requires a code from your e-mail.
• Sessions per device. In Settings you see every device that has signed in and can sign any of them out with one tap.
• On the phone — Face ID. The iPhone app asks for Face ID or Touch ID after a pause, so whoever picks up your phone does not pick up your money.
• No guessing. Sign-in, sign-up and password reset are limited by number of attempts, and no error message reveals whether an e-mail is known to us.

3.Read-only bank access

In short: we never see your bank password, we cannot move money, and access is revoked with one tap.

• A licensed route. The bank connection runs through an EU-licensed open banking service (PSD2) — the same route your bank itself offers to third parties.
• Read only. We receive the list of transactions and the balance. Making a payment, transferring or changing anything in your bank is not possible — the access agreement itself grants no such right.
• We never see your bank password. You confirm consent in your own bank with your own means, just like a payment. It never reaches us.
• Expiry and revocation. Consent lasts up to 180 days, after which the bank asks you to confirm it again. You can revoke it at any time — with one tap here or in your bank.
• Syncing follows your plan. If a subscription ends, fetching new data stops immediately. Transactions already fetched stay yours.

4.What even we do not see

In short: the admin tools cannot read your financial data — it is built into the code and checked automatically.

• Administration without financial data. The admin panel is built so that it cannot touch the users' transaction, account and goal tables at all. An automatic test fails the moment anyone tried to change that.
• Numbers only. To settle up with the bank data partner we need to know how many connections there are. Which bank and which accounts belong to which person, we do not look at.
• Every administrator action is written to a log that cannot be erased.
• Never sold, no ads. Your data is not our product. The app has no ads and no third-party trackers.
• Card details never reach us. Payments are handled by a licensed payment partner; we only see that a payment happened.

5.In your hands

In short: everything you put in can be taken out — a copy or a deletion, at any time, no questions asked.

• Export. In Settings, one tap gives you a full copy of your data in an open format (JSON): goals, categories, transactions, debts, limits.
• Deletion in one click. Deleting the account in Settings erases everything at once and for good — no call, no e-mail, no waiting. Backups follow on the schedule described in the privacy policy.
• A free path without a bank. If you do not want to connect a bank, everything works with manual entry and statement import — no time limit and no charge.

6.Compared with the largest budgeting apps

In short: the industry standard is our starting point, and in several places we go further.

The largest budgeting apps in the world, with millions of users, protect data by one and the same recipe: encrypted in transit and on disk, bank access through a licensed intermediary and read only, two-factor sign-in, deletion on request. None of them encrypts data so that they themselves cannot read it, because then neither bank syncing nor reports nor password reset would work. The table shows where we stand at the same level and where we go further.

7.If you spot a vulnerability

Write to support@groworth.xyz with "security" in the subject. We answer everyone who reports in good faith, and we tell the finder when the fix is out.

• Controller: SIA Appmeway, reg. No. 40103588483, Mēness iela 16-8, Riga, LV-1013, Latvia
• More on data processing: Privacy policy