— Security & Trust

Bank-grade security.
Calm-level transparency.

Your money. Your data. Your customers. We treat all three like they're our own.

Data in Canada
Canada (Central)
Database, files and authentication
PIPEDA
Canadian federal law
How we handle personal information
PIPA
Alberta
Our home privacy legislation
Read-only banking
Via Flinks
We can never move your money
— What we do

Layered, by design.

Encrypted in transit + at rest

TLS on the wire. Encrypted at rest on our cloud infrastructure in Canada.

Read-only bank access

We can see your transactions. We can never move your money. Period.

No data sales, ever

Your financial data is never sold, rented, or shared with advertisers.

Two-factor authentication

Authenticator-app (TOTP) two-factor, plus Face ID / fingerprint app lock on your phone.

Daily encrypted backups

Taken by our infrastructure provider. Deleted data leaves backups within 35 days.

Permissions enforced in the backend

Row-level security on every table; what your role can see and do is checked server-side, never just in the app.

— Your data

Yours. Full stop.

Export everything, anytime
More → Security → Export data. Your data walks out with you if you leave.
Delete it all, permanently
Delete your account in the app and it is gone immediately; backups follow within 35 days.
Never used to train AI
Your data goes to our AI provider only to answer your request, under commercial terms that exclude training. Never shared across workspaces.
— Report a vulnerability

Found something?

We run a responsible disclosure program. Report at security@cacheapps.io and we'll respond within one business day.

Contact security →
— Request docs

Need the paperwork?

Our privacy policy is public; a data processing agreement and our service-provider details are available on request.

Request documents →