ValamBuilt so we could not read your data
Security is not a feature we added. It is how Valam is built.
Money apps ask for everything. Valam asks for nothing.
Most finance apps upload your bank messages and spending to someone else's server. Valam does the opposite. It keeps your ledger in an encrypted vault on your phone and runs its intelligence there too.
Others
- Upload your transactions
- Show ads based on your spending
- Stop working without internet
- Lock insights behind accounts
Valam
- Keeps your ledger on your phone
- Has no ads and no trackers
- Works fully offline
- Needs no sign up to start
Hardware protected vault
Your master key is sealed by the Secure Enclave on iPhone or the Keystore on Android and released only after Face ID, fingerprint or PIN.
Encrypted database
Your ledger, attachments and chat history are encrypted on the device. The vault closes and keys are wiped whenever the app locks.
Recovery key
A recovery key shown once at setup is the only other way in. Lose both and nobody, including us, can open your data.
Encrypted backups
Export a backup file that is encrypted with a key derived from your passphrase. Restore it on a new phone.
Privacy mode
Hide amounts with one tap when someone is looking over your shoulder.
No ads, no tracking
No advertising, no analytics SDKs and no selling of data.
Where your data lives
| Data | Where it is | Who can read it |
|---|---|---|
| Transactions, accounts, goals | Encrypted database on your phone | Only you |
| Chat with Mathi | Encrypted on your phone | Only you |
| Backups | A file you choose, encrypted with your passphrase | Only you |
| Sync copy (optional, Plus) | Your iCloud or Google Drive, or Valam hosted | Only you, it is sealed on your phone first |
| Shared groups (optional, Plus) | Valam servers, end to end encrypted | Group members only |
| Think harder question (optional, Plus) | Sent to a cloud model, sanitised | Processed to answer you |
How the lock works
A random master key
Created on your phone at setup. It never leaves in readable form.
Sealed by hardware
The Secure Enclave on iPhone or Keystore on Android seals it.
Released by you
Only after Face ID, fingerprint or your phone PIN.
Used to derive keys
Your database, attachments and chat history are encrypted with keys derived from it.
Wiped on lock
When the app locks, the database closes and keys are erased from memory.
You stay in control
- Use the app fully with no account.
- Turn sync, groups and cloud thinking on or off at any time.
- Export your data as an encrypted backup.
- Delete your account and cloud data from Settings.
Ready to try Valam?
Join the launch list and we will email you once, the day it is available.