Security built on zero retention.
The safest way to protect your banking passwords is to never ask for them in the first place. Here is how TrackIt safeguards your finances.
Why We Never Ask For Your Bank Password
Traditional finance apps connect to your bank through third-party data aggregators. This requires you to type your bank username, password, and two-factor codes into their system. If that database is ever compromised, your real bank account is vulnerable.
TrackIt eliminates this vulnerability completely. You download your own bank statement PDF directly from your official bank and drop it into TrackIt. Our scanner extracts transaction amounts directly, without TrackIt ever having access or login rights to your bank account.
Temporary Memory Processing & Instant Deletion
When you upload a statement PDF to TrackIt, it is read strictly inside temporary device memory. It is never written to a permanent server hard drive or stored in cloud file storage.
As soon as the dates, store names, and amounts are displayed on your screen for confirmation, the original PDF file is wiped completely from memory. We keep zero copies of your original statement documents.
Industry-Standard Encryption Everywhere
Every connection and all saved records are shielded by modern security standards:
Encryption in Transit: Every connection between your device and TrackIt uses TLS 1.3 with Perfect Forward Secrecy to prevent eavesdropping.
Encryption at Rest: All stored records in our database are encrypted using AES-256 standard encryption.
Strict Data Isolation: Row-level database security ensures that your financial entries are only readable by your authenticated Google session.
Direct User Ownership & Data Deletion
You own 100% of your financial information. You can export your full transaction history anytime with a single click in CSV format. If you choose to delete your account, your data is permanently purged from our servers within 24 hours.
If you believe you have discovered a security vulnerability or have a security question, please contact our security team directly at [email protected].
Kraftarc Technologies, Security and Privacy Operations.