Last updated September 3, 2026
Your data never leaves this device. Ontop Finance has no server, no user accounts, and no backend of any kind. Every transaction, account balance, budget, and receipt you enter is stored directly in your browser's or app's local storage (specifically, IndexedDB) — the same technology any website uses to remember things about your visit. Nobody, including whoever built this app, can see, access, or recover your data. There's no "our servers" for it to sit on.
What's stored. Transaction records (date, amount, vendor, category), account names and balances you enter, budget targets, any receipt photos or PDFs you attach, and your reminder and backup preferences.
Nothing is collected about you. No analytics, no tracking pixels, no third-party scripts reporting on your usage, no tracking cookies. The app doesn't know your name, email, or location unless you happen to type them into a transaction description.
Optional passcode encryption. If you turn on a passcode in Settings, your data is encrypted on this device using AES-256-GCM before it's stored, with a key derived from your passcode. If you forget that passcode, there is no way to recover your data — not by the app, not by anyone. Keep a backup somewhere safe regardless.
Backups are downloads, not uploads. When you download a backup file from Settings, that file is generated and saved directly to your device. It never passes through a server.
If you clear your browser data or lose your device without a backup, your data is gone. That's the direct tradeoff of nothing ever leaving your device — there's no cloud copy to fall back on.
Changes to this policy. Updates to this policy will be posted on this page and reflected in the app itself.
Contact. Questions about this policy can be sent to hello@ontopfinance.app.