Your data is an encrypted file on your computer. That is the whole idea.

• No account, no sign-in, no server of ours
• No analytics, no crash reports, no tracking
• No bank connection: it never sees your bank login

What	When	What it sends
Update check	You press the button, or tick the box	The app's name and version, to the project's GitHub page
Price lookup (web search)	You run a price lookup	The asset's name, to the search engine you chose
Market prices	You press "Look up the prices"	A ticker and a date range, to Yahoo Finance
AI assistant	You turn it on and send a message	Totals, never raw transactions, to the model you chose. A model on your own machine sends nothing out.

Amounts, balances and account names are never part of a search or a price request.

• AES-256 encryption (SQLCipher)
• A random key, wrapped by your passphrase (if you set one) and by your twelve recovery words
• Encrypted backups to a folder you choose

• Malware already running on your computer as you
• Someone who has your computer, is logged in as you, and has no disk encryption, if you chose "open automatically"

The full, blunt version is in the repository: docs/THREAT-MODEL.md and docs/SECURITY-REVIEW.md.