We can't read your data. That's the whole point.
Cache was architected so that your financial life is sealed on your device, and stays sealed everywhere it travels.
AES-256-GCM, everywhere.
Every entry you make is encrypted with bank-grade AES-256 before it ever leaves your device. What syncs to the cloud is ciphertext, unreadable without your keys.
Derived from your passcode.
Encryption keys are derived from your personal passcode. We never see the passcode, so we can never derive the keys.
Safe passcode reset.
A recovery key wrapped with RSA-OAEP lets you reset your passcode without ever exposing your data in the clear.
Your device is the source of truth.
Data lives encrypted on your device first. Offline on a plane or in a dead zone, Cache keeps working, sync catches up later.
Locked the moment you look away.
Six-digit passcode, Face ID or fingerprint, and automatic locking after inactivity, from one minute to one hour, your call.
Nothing to breach.
Cache never asks for bank credentials. There's no aggregator, no third party scraping your statements, because there's no connection at all.
For those who read the fine print.
Sessions you control
See every device logged into your account and revoke any of them, anytime.
Export & leave freely
Your complete data exports to CSV and JSON. Deleting your account removes everything.
Transparent AI boundary
The AI assistant and receipt scanning process data server-side only when you use them, and only what you send.
Obfuscated storage
Even the structure of your data is disguised at rest, so stored blobs reveal nothing about their contents.
Privacy that doesn't ask for trust.
It's built so trust isn't required. Try it and see.