Security, in plain language

Handing your complete financial picture to an app is a big ask. We wouldn't do it ourselves without good answers to a few questions, so here they are, hardest first.

The short version, what actually runs where:

• Your own database: every customer's data lives in its own database file, hosted in EU data centres, or on your own computer with the desktop app. No shared tables.
• Read-only connections: exchange keys, broker tokens and bank links can see balances, never move money.
• Your own encryption keys: credentials encrypted at rest; nightly backups encrypted with a key unique to your account before they leave the service.
• No trackers, full export, one-click delete.

Can anyone take my money?

No, and not because we promise to behave, but because it's impossible by design. Connections to exchanges use read-only API keys: they can see balances, but they cannot trade, withdraw or move anything. We never ask for keys with trading or withdrawal permissions, and Krosos never holds your assets. The worst thing a stolen key could do is read a list of numbers. The longer answer, with what a read-only key can and cannot do.

Bank connections work the same way. They go through Enable Banking, a regulated open-banking provider (a PSD2 Account Information Service Provider), and are read-only and balances-only. They cannot initiate payments or move money. You approve each connection on your own bank's login screen.

Who can see my numbers?

You, when you sign in with your Google account. That's the design goal: your finances are nobody else's business, not advertisers', not data brokers', not ours. There are no ads, no analytics and no tracking scripts anywhere in the product.

Like any hosted service, our operator can access infrastructure for maintenance and support. We don't browse customer data, and we'd rather build features that make access unnecessary, like the export and delete buttons further down.

Or take us out of the picture entirely. The desktop app runs the whole product on your own computer, with its database on your machine and no server of ours in between. There is then nothing for an operator to access, so the honest answer to "can someone at Krosos read my data" becomes simply no. Same €60/year, same features. Get the desktop app →

Where does my data live?

In a database of your own. When you sign up, we create a database file that is yours alone, with its own encryption keys. Your finances are not a row in a big shared database next to thousands of other people; they live in their own file, and your credentials and backups are sealed with keys no other customer's account shares. With the desktop app, they live on your own computer, full stop.

Hosted plans run in European data centres.

What exactly is encrypted?

• In transit: all traffic between you and Krosos uses HTTPS (TLS).
• API keys: stored encrypted at rest with a key unique to your account, never shown again after you save them, and never written to logs or returned by the API.
• Backups: taken nightly and encrypted with a key unique to your account. A backup of your data cannot be read with another customer's key.

One honest note: we don't market Krosos as "end-to-end encrypted", because the server needs to read your data to compute your net worth, fetch prices and draw your charts. Our protection model is isolation: your own database, your own encryption keys, plus encryption where it matters most. And if you want the categorical guarantee instead, the desktop app keeps everything on your own machine. We'd rather tell you exactly how it works than use a buzzword that doesn't apply.

What if something happens to my data?

Your database is backed up every night, encrypted, to separate storage. If something goes wrong, on our side or yours, we can restore your data.

How do I sign in?

With your Google account. Krosos never sees or stores a password. Sign-in security, including two-factor authentication, is handled by Google.

Is the Telegram bot safe?

It's optional, and it's built so the connection stays yours. You create your own bot, so the token is yours. There's no shared bot your messages pass through. The token is stored encrypted with your account's key, never shown again or written to logs. Only the single chat you link can read your net worth or log a trade; every other chat is refused, and Telegram has to present your account's private secret before any message is accepted.

Every trade or position change is shown for you to confirm and saved only when you tap Confirm, through the same checks as the web app. Remove it whenever you like and the token and connection are wiped.

What if I want to leave?

Then leaving is easy, on purpose. At any time you can export your complete database with one click and take it with you. It's a standard SQLite file you can open with free tools. You can also delete everything with one click. After a cancellation, your data is kept for 30 days (in case you change your mind), then permanently deleted.

We think the ability to walk out the door at any moment is the strongest reason to trust a product. You're never locked in.

What we will never do

• Sell or share your data, with anyone, for any reason.
• Show you ads or run third-party trackers.
• Ask for API keys that can move your money.
• Make it hard to export or delete your data.

Still have a question?

Ask us directly: [email protected]. A real person reads it. For the formal version of all this, see the privacy policy.