What we do
Sensitive fields are encrypted before storage
Quantity, pricing, currency, and notes are encrypted with your PIN before they've even left your device.
Row Level Security (RLS)
Encryption key material in user_encryption is scoped by auth.uid(), and transaction APIs validate user and portfolio ownership.
Auto-lock options across active sessions
Users can configure auto-lock timeouts, and protected routes stay locked until explicitly unlocked.
Secure Authentication
Using modern authentication methods, we ensure that only you have access to your data.
