Encrypted by Default
AES-256 encryption with a key stored in your device's Secure Enclave. Not us, not anyone else — only you can read your data.
Biometric Gate
Face ID or fingerprint required on every open. A five-minute grace period means no friction when you're mid-flow.
Voice Logging
"Spent $14 at the coffee shop." TPO listens, extracts the transaction, and never stores the audio. Zero retention.
Guardian AI
An on-device financial assistant that knows your four walls, goals, and discretionary spending — and can simulate scenarios without sending data anywhere.
Encrypted Backup & Export
Back up to iCloud (iOS) or export to a password-protected ZIP. Your data leaves on your terms — readable only with your password.
Privacy Audit Trail
Every sensitive operation — import, export, integration — is logged locally. You always know exactly what happened and when.
Budgets & Recurring
Set budgets per category, automate recurring transactions, and let the rules engine handle categorization — all offline.
Investments & Net Worth
Track holdings across accounts. Optional live pricing fetches only ticker symbols — no account details, no position data sent out.
Household Sync
Pair devices on your local network via QR code. Sync happens over encrypted TCP — never through a third-party server.
