Security

Plain answers about how we look after your records.

What we never ask for

• No bank passwords. Kinance doesn’t connect to your bank. You add entries yourself.
• No card numbers. Payments are handled by Dodo Payments; we only learn whether a payment succeeded.
• No kids’ contact details. Kids sign in with a username and PIN, without an email or phone number.

How your account is protected

• Sign-in is run by Clerk, a dedicated identity service. Your password never reaches our servers.
• Kids’ PINs are stored only as salted hashes, and repeated wrong guesses lock the PIN for a while.
• Every request is checked on the server for who you are and which workspace you may see. Kids only ever see their own money.

How the service is run

• All traffic uses HTTPS.
• Our servers and database are hosted by DigitalOcean in Singapore.
• The app runs with the least privilege it needs, and secrets are kept out of the code.
• Each release is checked for known vulnerabilities in the software it depends on before it goes live.
• The database is backed up every night, and backups are kept for 14 days.
• Error reports contain no personal details and no screen recordings.

You stay in control

Download everything you’ve added as a file, or delete your account, from Settings at any time. Deleting cancels any subscription and removes your data from the live database straight away. Read the privacy policy for the details.

Found a problem?

If you think you’ve found a security issue, please email [email protected] with what you found. We read every report and reply as fast as we can.