Access to records
Records belong to a couple, rather than just an account. The database itself checks who can read or change each row, in addition to the interface checks. A request from another user’s account cannot retrieve your data even if it bypasses the app.
- A regular user can see only their own couple’s records.
- An entry marked “Hide from partner” is not sent to the other person: the server withholds that row until its reveal date.
- Password attempts are rate-limited.
Project administrators can view couples’ financial entries in a restricted panel, including amounts, categories, who recorded them and comments. This includes entries hidden from a partner. “Hide from partner” restricts the partner’s access, but not the project administrator’s access.
Sign-in
The site uses HTTPS. Passwords are stored on the server as hashes, rather than as the original text in the database or logs; the original password cannot be recovered from a hash.
On a phone or laptop, you can protect sign-in with Face ID or Touch ID. Your fingerprint and facial image stay on your device: the app receives only the device’s confirmation.
Documents are encrypted on your device
Documents work separately from the other features. You choose a PIN, and files are encrypted in your browser with a key derived from that PIN.
- The files themselves stay on your device and are not uploaded to the server.
- Your PIN is not sent to the server; only a verification value is stored there.
- The trade-off: a forgotten PIN cannot be recovered. You will need to reset it and add your documents again.
Keep your own copy
Settings let you export your data to JSON or CSV and restore from a file. This helps with accidental deletion, mistakes or returning to an earlier copy, rather than preventing a security breach.
Where data is physically stored
The site is served from servers in Russia. The database, authentication and server functions use Supabase, whose servers are outside Russia.
If you have questions about data processing or want to delete your account, email noreply@timur-p.ru from the address registered to your account.
What these protections do not do
Clear limits help avoid a false sense of security.
- Your partner can see almost everything you add. This is intentional; hidden financial entries are the exception.
- Shared data is stored on the server so both of you see the same information. A copy stays on your device for offline use and is removed when you sign out.
- Someone who gains access to your email and password can access your account. Face ID protects a particular device, rather than the entire account.