Security

Last updated October 4, 2026

SynergyOwl holds a household's financial history, so it is built to need as little trust as possible. This page explains what it does and does not do with your data.

No bank logins

SynergyOwl doesn't ask for your online banking password or connect to a bank or card issuer, directly or through an aggregator. Everything it knows comes from statement files you download from your bank and upload yourself, and from entries you type in. There are no bank or card credentials stored anywhere, so there are none to leak.

Each household is walled off by the database

Every request runs inside the database with the signed-in person and their household attached, and the database's row-level security only returns rows that belong to that household. A mistake in a screen or a query cannot show one household another household's data, because the database itself refuses. This is checked by automated tests on every change.

Private accounts are enforced the same way

Inside a shared household, an account can be private to the person who holds it. Its balance, its transactions, its receipts, its import history and its rules are visible only to that person, enforced by the same database rules rather than by hiding them on screen. Private accounts never count in household totals. A transfer between a private account and a shared one shows on the shared side without the private account's name or balance.

Sign-in

• Passkeys (Face ID, Touch ID, Windows Hello or a security key), which cannot be phished.
• Two-factor authentication with an authenticator app, plus one-time recovery codes.
• Sign in with Google or Microsoft, if you prefer.
• Short-lived sessions that renew quietly, with stolen-token detection, and account lockout after repeated failed passwords.

Secrets and files

Passwords are stored only as salted hashes. Settings that hold secrets, such as email and storage keys, are encrypted before they are written, so a copy of the database alone does not reveal them. Uploaded statements and receipts are stored privately and opened through links that expire after ten minutes.

Support access is recorded

If you ask for help and an administrator opens your account, a banner says so on every page they see, and the visit is written to an audit trail that cannot be edited. Administrators need two-factor sign-in to reach the administration pages at all.

Your data stays yours

You can export everything at any time from Settings: every account, entry, category, rule and uploaded file, as spreadsheets plus the original files. SynergyOwl does not sell data, show ads, or send your transactions to third-party AI services.

Reporting a problem

If you think you have found a security issue, please email [email protected]. Please do not test against other people's accounts.