Can I get my data back?

Yes, any time, from Settings → My data. The export is a complete, readable JSON file you keep wherever you want.

Security & privacy

Mechanisms, not adjectives.

Q: Is my data end-to-end encrypted?

No, and we would rather say so. Your data is encrypted in transit and at rest by our host, but our servers can technically read it — that is what makes the nightly net-worth snapshot and bank syncing possible.

"Bank-grade security", "military-grade encryption": everyone writes it, nobody can check it. Here is exactly what PairWise does with your data, who can reach it, and what stops anyone else from getting there.

Where it starts

No trackers. No ads. Nothing to sell.

A budget tells where you live, what you eat, when you travel and how much you earn. Exactly the kind of data an ad network loves. PairWise sends it to no one, because it carries nothing that could.

No analytics tooling — no Google Analytics, no Mixpanel, no Meta Pixel.
No ad network, and no business model that would depend on one.
No selling, no commercial sharing of your data, in any form.
Your insights are computed on your device — the "For you" suggestions never reach a server.

Check it yourself, without taking our word for it

Open PairWise, press F12, go to the "Network" tab and reload. You will see exactly what the app contacts. It is the one promise on this page you can verify in thirty seconds — which is why we put it first.

Transparency

What leaves your device, and what never does

An app that shows live prices and exchange rates necessarily makes network calls. Claiming otherwise would fall apart on first inspection. Here they all are.

Destination	What goes	What never goes
Our serversGoogle Cloud / Firebase	Your financial data, to sync it across your devices and with your partner.	—
Exchange ratesopen.er-api.com	The currency codes you use (EUR, THB…).	No amounts, no transactions, no identity.
Asset pricesCoinGecko, Twelve Data	The symbols you track (bitcoin, a stock…).	Quantities held, your net worth, your identity.
Fonts & iconsGoogle Fonts, jsDelivr	Your IP address, as with any file loaded from another domain.	Nothing you type into the app.

The last two rows are the kind of detail most privacy pages leave out. We would rather write them down: a page that hides what is inconvenient is not credible about the rest.

The heart of it

Who can reach your data

Only one answer matters: you and your partner. Since protection means nothing until you name the threat, here are the four that count, each with the mechanism behind it.

Against a break-in Your password is never stored, never even seen by us: sign-in is handled by Google Identity, one of the most battle-tested systems in the world. Everything travels encrypted, and everything is encrypted at rest on the servers. Sensitive actions — deleting your account, for instance — require re-entering your password, even when your session is already open.

From other users Access to a space is checked on the server, on every read, against the member list. A malformed space is denied to everyone rather than left open by default. Joining a couple goes through a server function only: nobody can add themselves.

From a stolen invite code A space's code expires after 7 days and closes the moment your partner has used it. Outside that window no code works. Codes come from a cryptographic generator, never from ordinary programming randomness.

From a bank-side leak Bank access tokens live in a space the app cannot read — only the server can. Even someone taking over your browser could not extract them.

What really sets us apart

Our access rules are tested before every release

A security rule can deploy with no error at all and still protect nothing: the mistakes only show at evaluation, once your data is behind them. It is a classic trap, and it has cost many applications dearly.

Our rules are run against the real security engine on every change, with fake accounts trying to reach what isn't theirs.
That test suite is blocking: if a test fails, the release does not happen. It is not a good intention, it is a lock.
One test deliberately keeps a broken rule as a sentinel, to confirm our tests can still detect a genuine hole.

We are not asking you to trust us: we are telling you what is automated, because a process holds where individual vigilance eventually slips.

Your control

Leave whenever you want, with everything

A finance app that holds its users through their data does not believe in itself.

Full export in one click — Settings → My data. A readable file you keep wherever you want, and can import back.
Delete means delete. Removing a transaction also removes the receipt photo; it is no longer reachable, even through a link obtained earlier.
Closing your account revokes bank access and erases your data. When the last member leaves, receipts and photos are purged along with the rest.

Frequently asked

What people ask us most

Does PairWise sell my data?+

No. The app ships no tracker, no analytics tool and no ad network — so there is nothing to sell, and nothing to switch off. You can verify it yourself in your browser's network tab.

Is my data end-to-end encrypted?+

No, and we would rather write it plainly. It is encrypted in transit and at rest by our host, but our servers can technically read it: that is what lets us record your net worth every evening and sync your bank accounts.

What happens to my receipt when I delete a transaction?+

The image is deleted from storage along with the transaction. It stops being reachable, including for someone who saved its sharing link earlier.

What happens if I delete my account?+

Your account and credentials go immediately. The couple's history stays as long as your partner keeps using PairWise — it belongs to them too. When the last member closes their account, everything is deleted: transactions, receipts, photos and bank connections.

Where is my data hosted?+

On Google Cloud, the infrastructure behind Firebase. Our server-side processing runs in the European region europe-west1 (Belgium).