Security

Privacy-first foundations for real family and finance data.

The app uses encrypted personal fields, lookup hashes, prepared statements, passwordless login, CSRF protection, tenant-scoped queries, audit logs, and centralized role gates.

Encrypted PII at rest with lookup hashes for searchable fields

Passwordless email OTP and optional SMS OTP for verified mobile users

Session cookies with HttpOnly and SameSite plus idle timeout handling

Read-only enforcement, audit logs, export protections, and role-scoped manager sections