Security

Built like your money depends on it

Fidexa is a financial product, so security is not a feature — it is the foundation. This page describes, concretely, how your data is protected.

Your bank access is read-only

Fidexa connects to banks through Plaid, the same connectivity provider used by major financial apps.
Access is read-only: Fidexa can see balances and transactions, but can never move money, make payments, or change anything at your bank.
Your bank username and password go directly to Plaid over an encrypted channel. Fidexa never sees them and never stores them.
Bank access tokens are stored server-side in a restricted table that client apps cannot read.

Every table is protected by row-level security: the database itself refuses to return rows that do not belong to your account, even if an app had a bug.
Anonymous (logged-out) access to profile data is revoked entirely.
Sensitive account events — premium changes, bank connections and removals, account deletion — are written to an internal audit log.
Subscription status can only be granted by our servers after cryptographically verifying the purchase with Apple or Google — clients cannot write it.

App Lock with Face ID / fingerprint on both iOS and Android.
On Android, financial screens are blocked from screenshots, screen recording, and the recent-apps preview.
On iOS, an opaque privacy cover hides balances in the app switcher.
Login sessions are stored encrypted on the device.

All traffic between your device and our servers uses TLS encryption.
Data is encrypted at rest on our infrastructure.
Third-party contact details saved from business cards are kept in the device keychain, encrypted and excluded from cloud backups.

AI features (categorization, receipt parsing, the financial assistant) process your data to serve you — your data is not used to train public models.
AI requests run through our servers; your records are never exposed to other users.

Export everything Fidexa stores about you as a single file, any time, from Settings.
Delete your account permanently from inside the app or from the web — profile, transactions, businesses, bank connections, and business card included.
Unlinking a bank stops all future imports immediately.
Block and report tools are built into the networking features.

We take reports seriously and respond quickly. Email support@fidexa.tech with the details and we will investigate.