Your complete financial picture. Kept private.

We never ask for a bank login, so we never hold one. No connections, no aggregation.

Numbers get in three ways: you type them, you paste a statement, or a tool you connected writes them for you.

Your data is encrypted where it is stored, with AES-256. A stolen disk or a stolen backup is unreadable without the keys, and the key that decrypts them is never stored in the database or in a backup.

End-to-end encryption, where only you hold the key, is the right model for a password manager and the wrong one for a logbook. The server has to add, convert, price and chart your positions, and it has to reset your password when you forget it. So while it works on your data, it can read it.

Who you are is encrypted: your name, your email, and everything you wrote or pasted, from position names to notes to statements. Passwords are hashed, never stored. Instruments, quantities, values and dates are stored as numbers, so the arithmetic works. Someone holding a database copy without the keys would see that a holding in some instrument was worth 41,200 on 3 March, and nothing about whose it was or what you called it.

Encryption

AES-256

Keys

Never stored with the data

Passwords

Hashed, never stored

You. A tool you connect, within what you allowed, until you switch it off. If you use statement import, an AI model reads the statement once, and the text is deleted within 24 hours.

Our support staff see no positions, no values and no net worth. Price providers get a ticker and a date, never a quantity. There is no advertiser and no data broker.

In Germany. Email goes out from Frankfurt. Backups stay in the European Union.

Backups are taken every night and encrypted before they leave the server. We have rehearsed the worst case: from a bare machine to a running service in 21 minutes.

Hosting

Germany

Email

Amazon SES, Frankfurt

Backups

Encrypted

Restore drill

4 August 2026, 21 minutes

You pay us. The free tier is what you do by hand; the paid tier is what the machine does for you. Stop paying and every number you entered stays readable and exportable.

One request in your account settings prepares a complete copy of everything, as JSON and CSV, ready for seven days. Deleting the account is immediate and final. Export first.