Security & Privacy

No bank logins, ever

Most net-worth trackers ask you to hand over your online-banking username and password - through a third-party 'aggregator' - so they can read your accounts automatically. Kesoria does not, and never will.

You enter your balances yourself. It sounds like more work, but it is the single most important security decision in the product: your banking credentials never leave your control, so there is nothing for us - or anyone who breached us - to steal, because we never hold them. It also means Kesoria works for every account in every country, including the many banks and assets that aggregators simply do not support.

You update your numbers in a couple of minutes, roughly once a month. In exchange, your most sensitive credentials stay exactly where they belong: with you.

We never see your card details

When you upgrade to Pro, payment is handled entirely by Dodo Payments, our Merchant of Record - a specialist, regulated payment company. Your card number, security code and billing details go straight to them over their own secure systems; they never pass through Kesoria, and we never store them. We only ever receive a simple 'this account is paid' signal back.

Your connection is encrypted

Every connection to Kesoria is encrypted with TLS - the same technology the padlock in your browser represents - enforced end to end. Our servers sit behind a security layer that only accepts traffic through that encrypted edge, so there is no unprotected back door to the application.

Your data is also backed up regularly, and those off-site backups are themselves encrypted - so a copy exists to recover from, and that copy is protected too.

Delete everything, anytime - and we mean everything

You can permanently delete your account and all of your data from your settings, whenever you want. It is a genuine erasure, not a 'deactivate' that quietly keeps your data on a shelf - your assets, history, goals and preferences are all removed in one atomic action: either all of it goes, or none of it does, never a half-deleted account.

The one thing we keep is designed to protect you, not track you. To stop someone farming unlimited free trials by deleting and re-registering, we keep a one-way scrambled fingerprint of the email that used a trial. It is a salted hash with no lookup table - a pseudonym that cannot be turned back into your email address or linked to you. Your personal data is gone; only an un-reversible token remains. That is how we honour a deletion request and still keep the free trial fair for everyone.

Accounts and passwords

Passwords must be at least 12 characters - length is the single biggest factor in a password's strength, so we ask for a real one rather than a fistful of awkward symbols. We verify your email address, so an account can only be opened by someone who controls that inbox.

Sign-in is rate-limited to blunt automated guessing, and an idle session signs you out automatically - useful on a shared or borrowed device.

What we do NOT do

We do not sell, rent or share your financial data. Full stop - it is not our business model. Kesoria is funded by Pro subscriptions, not by your data. We do not run third-party advertising or data-broker trackers on your account, and because we never connect to your bank, we cannot move money - and neither can anyone else through us.

Being honest about what this is

Kesoria is a private, manual net-worth tracker built by a founder who uses it too. It is deliberately simple, which is a security feature in itself: a smaller product has a smaller attack surface. We are not a bank and we do not hold your money - we help you see it clearly.

You get 90 days of full Pro to try everything, with no card required. If a security question ever comes up, a real person reads every message.

Questions?

Spotted something that looks wrong, or have a security question? Email [email protected] - a real person reads it. You can also review our Privacy Policy, Terms and Refund Policy.