Privacy & security

Privacy in Thrift isn’t a setting you turn on; it’s the architecture. There’s no account, no server, and nothing about you to collect — so there’s nothing to leak or sell.

Encrypted on your device

Your records — every transaction, account, budget, goal, and investment — are encrypted at rest with SQLCipher — whole-database encryption — and the key is held in your device’s secure hardware (Keychain on iOS, Keystore on Android). The data is unreadable without your device.

Biometric lock

Add Face ID or Touch ID on top and a glance opens the app — and nothing else does.

No bank connections

Thrift never links to your bank. Entry is manual by design: writing the line takes a couple of seconds, and those seconds are when you actually notice what you spent. The friction is the feature.

What ever reaches the network

Your transactions never leave the phone. Three optional features touch the network, and you control each:

• Exchange rates for multi-currency totals (currency codes and dates only).
• Broker sync, if you connect one — fetched straight to your device.
• AI parsing for a receipt or voice note, off by default, using a key you supply.

Everything else is local. The full detail is in the Privacy Policy.

Nothing sold

The app ships with no analytics, no ad SDKs, and no trackers. The business is the app, not the person using it.