Data & security

Your Google sign-in details (email address, name, profile picture), your settings (currency, time zone), the financial records you enter: accounts, transactions, categories, budgets, recurring transactions and investments, and a simple record of the days you open Piepaye and of your exports. Balances, totals and budget progress are calculated from your transactions each time; they aren’t stored separately.

The only way to sign in is with Google. Piepaye has no passwords of its own, so it has none to lose or leak, and it sends no sign-in emails. Google checks who you are, using any protection you’ve turned on for your Google account, such as 2-Step Verification. Piepaye then keeps you signed in with a secure, encrypted-in-transit session cookie.

Every record belongs to exactly one account, and the database itself enforces it: it returns, changes or deletes a record only for the account that owns it, whatever the website asks for. Records can only refer to other records of the same account, and the account a record belongs to can’t be changed from the outside. Automated tests check this before each release, by trying to read and change one test account’s data from another (on a separate test copy, never on real data).

• All traffic uses HTTPS, and the site tells browsers to always use it.
• The website restricts what can run on its pages and refuses to be embedded in other sites, which guards against common browser attacks.
• The spreadsheet export works only for the signed-in owner, is limited to ten exports in ten minutes, and writes text that looks like a spreadsheet formula as plain text.
• Error messages never show internal details. Server logs record what failed (an error code and a short technical message), not your transactions.
• The website runs without any administrator key that could bypass these rules.

Piepaye has an administration area for its operator. Who may use it is decided by the database, not the website, and access to it and every change made there are logged. It shows account details (name, email address, sign-up and last sign-in dates), usage activity for each account (active days, how many records of each kind it has and created, which features it uses) and statistics across all accounts. Individual financial records are not accessible to administrators through the administrative interface: no transactions, amounts, balances, investment values, budgets, recurring details or exports. See the Privacy Policy.

The database and sign-in run on Supabase (Mumbai region). The website is hosted by Vercel, with Piepaye’s server functions in its Mumbai region. Google handles sign-in. Nothing else: no third-party analytics, advertising, error-tracking or AI services.

Settings → Delete account asks you to type your email address, then removes everything in a single step: every transaction, financial account, category, budget, recurring transaction and investment, your profile, and your sign-in record. You’re signed out, and nothing can be recovered afterwards. Export first if you want a copy.

• It doesn’t connect to banks, cards or brokers, and never asks for account numbers or banking passwords.
• It can’t move money.
• It doesn’t sell, rent or share your data, show ads, or track you across sites.
• It doesn’t use your data to train AI or build profiles.

• Piepaye is operated by Sai Swarup as an independent personal project. It has no 24/7 monitoring, no formal security certification and no independent security audit.
• Data is encrypted in transit and stored with an established database provider, but it is not end-to-end encrypted: the service and its infrastructure providers can technically access the database to operate it.
• Piepaye has no two-step verification of its own; that comes from your Google account.
• When you sign out, a session that was already issued can remain valid for up to an hour on the device that had it.
• Piepaye doesn’t make its own backups of your data. Keep an export of anything important.

To report a security problem: piepaye.support@gmail.com. This inbox is read by Sai Swarup, not a staffed support desk, so replies can take a few days. Please don’t send passwords or financial details by email.

You can also do most things yourself in the app: export your transactions from the ledger, edit any entry, and delete your account in Settings.