Security

You can sign in with an email address and password, or with Google. Passwords are handled by the managed sign-in service and are never visible to this app.

Every item and cost carries the account that created it. Access rules in the database allow a signed-in person to read, add, change and delete only their own rows — a request for anyone else's data returns nothing, even if it is made directly against the database.

The dashboard, inventory sections and business costs are behind sign-in. If your session ends you are sent back to the sign-in screen, and cached figures are cleared when you sign out.

All traffic between your browser and the app is encrypted over HTTPS.

Use a password you do not reuse elsewhere, and sign out on shared computers. If you ever think your account has been accessed by someone else, change your password immediately.

If you spot something that looks like a security issue, report it to the account owner of this app.