Security
Your data protection overview.
Encryption Status
Local Storage
Data in your browser
Cloud Storage
Data at rest on servers
Key Derivation
How your encryption key is created
How your data is protected
End-to-end encryption
Financial data is encrypted on your device before it reaches our servers. We never have access to your plaintext financial information.
Anonymous mode
Without an account, all data stays on your device. Nothing is sent to any server.
Secure authentication
Passwords are hashed with bcrypt. Sessions use HttpOnly cookies. Google OAuth is available as an alternative.
No third-party analytics
We do not send your financial data to analytics services, AI providers, or third parties.
Transparent billing
Payment processing is handled by Lemon Squeezy. We never see or store your payment details.
Privacy-first by design
Aurefi is built on the principle that your financial data belongs to you. We do not sell data, serve ads, or share your information. Our encryption architecture means that even if our servers were compromised, your financial records would remain unreadable.