Where is my data stored, and is it private?

Your data lives on your device, in a local database. Under normal use, Cashflow does not send your transactions, balances, or account details to us or to anyone else.

The one exception is Cloud Backup — an optional feature you turn on by signing in with a Cashflow account. When it’s on, the app uploads a copy of your data to our servers so you can restore it later. That copy is end-to-end encrypted with a key locked by a backup password only you know. We never receive that password, so under normal operation we cannot read your backups — even though they live on our infrastructure. (The honest caveat: because the encrypted backup and the locked key are stored on our infrastructure, someone with administrative access could attempt to unlock the key by guessing your backup password, which is why a strong, non-reused password matters — see Cloud Backup.)

If you turn on Dropbox backups, a copy of your backup file lives in your own Dropbox account under your control. See the Cloud Backup page and the Privacy Policy for the full details.