Security & privacy
Here is exactly how Qash protects your money data, written to match what we built.
Your money data stays on your device
Transactions, statements, receipts, budgets and jars live in your browser's storage on each device. Our servers hold your account and passkeys, your plan, the percentage you share in a group, a minimal alert schedule (a date, a type and a fixed label such as "An expected expense is coming up"), and, on paid plans, an encrypted backup.
The backup is encrypted before it leaves
On Private and Connected, your device encrypts a copy of your data with a key it made itself and uploads only ciphertext. We keep copies of the key wrapped under your recovery key and, where your browser supports it, your passkey. We cannot open either. Lose both and the backup cannot be restored; the app says so when you turn it on.
Sign-in without passwords
An email code plus a passkey: Face ID, Touch ID or your device's lock. The app locks after five minutes without activity, and asks for the passkey again before exporting data, deleting the account, changing email or changing plan.
No bank passwords, no money movement
On Connected, read-only linking goes through Plaid, on your bank's own sign-in page: we never see your bank login and can never move money. Transactions pass through our server to your device and are not kept there; we hold only an encrypted access token, revoked when you disconnect. Free and Private never link.
Groups share percentages only
A savings challenge ranks people by percent of their own target. Amounts and email addresses never leave your device.
Security alerts you cannot switch off
A new sign-in, a new passkey, an export, an email or plan change, a deletion request: each one emails you.
No AI, no trackers
Every number comes from plain, versioned rules that run on your device; an automated check in our build fails if an AI or analytics package is ever added. The site and the app set no advertising cookies.
Data we never collect
- Bank passwords or logins.
- Your transactions, statements, receipts, budgets or jars. They stay on your device.
- Other members' amounts. Groups share percentages and display names only.
- Location or camera details from receipt photos; they are stripped before saving.
- Anything for advertising. No ad trackers, no data sales.
Found a vulnerability?
Email security@qash.solutions. Our disclosure policy and the address are also in /.well-known/security.txt. Please don't test against other people's accounts.
This page is reviewed with every release so it matches the app. Nothing here is a guarantee against every attack, and nothing is financial advice.