Security
Your money stays yours. So does your data
To trust a finance app you should know what it does and what it never does. It’s all on this page, plainly.
What Ceres never does
- Connect to your bankIt never reaches your bank account or online banking, and offers no open-banking service.
- Move moneyNo payments, transfers or trades happen in the app. Ceres only keeps track.
- Ask for your card numberThe full card number, CVV, IBAN or bank password are never asked for or stored; the last four digits are optional.
- Sell your dataNo ads; your spending data is never used for advertising or marketing, and never sold.
How your account is protected
- App lockFace ID or Touch ID on launch, a 6-digit PIN as fallback. The operating system does the check — biometric data never reaches Ceres. Your PIN and session keys stay in the device’s secure storage (Keychain / Keystore).
- Two-step verificationSigning in on a new device asks for a code sent by SMS.
- Active sessionsSee which devices are signed in, where and when they were last used — and sign all the others out in one tap.
- Encryption and access rulesEvery connection is encrypted with TLS. Access rules in the database let each person reach only their own data and their household’s. Your password is stored only as a one-way hash.
Ceres AI and your data
Ask Ceres, Ceres notes, receipt reading and statement import run on Anthropic’s Claude model. A request is only sent when you use one of these features.
Sent
- Your question and the summary its answer needs: totals, the category split, the transactions involved, card summaries
- The photo of a receipt you scan; the contents of a statement you import
Never sent
- Your e-mail address, phone number or password
- Anything for model training — under the API terms, data sent isn’t used to train models
AI answers can be wrong; they’re not financial, tax or investment advice.
Where your data lives
- Stored in the European UnionThe database, sign-in and files run on Supabase in Ireland. Transfers abroad rely on the safeguards of KVKK art. 9.
- Statements aren’t keptA PDF statement is deleted as soon as it’s been read; Excel and CSV files are read on your device only and never uploaded.
- Works offlineA copy of your records stays on your device and syncs when you’re back online.
Your rights, one tap away
- Download my dataExport every record you have: Profile › Import / export.
- Delete my accountSign back in within 30 days to undo it; after that your records are deleted.
No system is perfectly secure. If a breach happens, we’ll inform you and the relevant authority as the law requires.
Spotted a problem? Write to info@appceres.com.
Coming soonApp StoreComing soonGoogle Play