Security & privacy
Is my data safe?
Yes. Your data is encrypted on your phone and on our servers, and encrypted in transit. OTP codes never leave your phone. We never sell your data. Finanseal only records: the app cannot move your money and doesn't connect to any bank account.
Where your data goes
On your phone
The notification filter, OCR, speech and text-to-speech run on your phone. Images and OTPs are never sent. The local database is encrypted.
Finanseal servers
Encrypted sync, reports, exports and period emails. Data and backups are encrypted at rest.
AI: Anthropic (USA)
Payment text only, with names and account numbers masked where possible, once you agree. Not used to train models.
Notifications are read with care
- On Android, a filter on your phone scores each notification by its amounts, finance words and app. Anything not about money is dropped without being stored.
- OTP and verification codes, promos and ads are blocked on the phone, even when they contain amounts.
- Notifications Android 15 hides because they contain an OTP can't be read, and we don't try. Finanseal only counts them so you know.
- You can mute any app or turn notification access off at any time.
Encrypted at rest and in transit
- Every connection uses TLS.
- The database on your phone is encrypted, with keys in Android Keystore or the iOS Keychain.
- Our server database and its backups are encrypted at rest.
- App lock with fingerprint, Face ID or PIN. Passwordless sign-in: Google, Apple or an email code.
Just enough AI
- Only the text needed is sent, with names and account numbers masked where possible. Images stay on your phone.
- AI processing needs your consent, and you can withdraw it any time in Settings > Privacy & data.
- Our AI provider is bound by a data processing agreement and we request zero data retention. Your data isn't used to train models.
- Ask Sealy answers from your own workspace data through predefined functions, and never gives investment advice.
What we never do
- Sell your data or show ads.
- Move money, hold funds, or connect to bank accounts.
- Ask for your PIN, bank password or OTP code. If someone asks for them in Finanseal's name, it's a scam.
- Show amounts in a recap you share, unless you turn them on.
You're in control
- Separate consents for AI processing, notification reading, period emails, analytics and marketing email.
- Hide amounts on the lock screen (hidden by default).
- Export all your data as CSV on any plan.
- Delete your account in the app or on this website. All your personal data is deleted within 30 days.
Following Indonesia's rules
- We follow the Personal Data Protection Law (UU 27/2022) and PP 33/2026, including consent per purpose and an impact assessment before launch.
- If a data breach happens, we tell you and the authority within 3×24 hours.
Found a security issue?
Send the details to hello@kasankaf.com and please don't publish them yet. We'll respond quickly and let you know when it's fixed.