Data Security

Last updated: 23 September 2026

Butcen is designed so that sensitive financial notes and amounts stay under your control. This page summarizes the technical measures we apply.

End-to-end encryption

Selected fields (such as amounts and notes) can be encrypted on your device with AES-256 before they reach the server. The server stores ciphertext and cannot read plaintext without your credentials.

Account security

• Passwords stored as secure hashes (never plaintext)
• Session tokens and HTTPS for all API traffic
• Optional biometric app lock on Android

Sync

Web and Android use the same account over encrypted connections. Sign out of unused devices when needed.

Hosting

Application data is hosted in Türkiye. Access is limited to operations required to run the service.

Your responsibilities

• Use a strong, unique password
• Do not share your vault / app password
• Keep your device and OS updated

Related: Privacy Policy · Terms of Use