• The vault — records and history are in an encrypted database; photos and documents are encrypted files with meaningless names. Without the passphrase or recovery key, a stolen copy is unreadable.
  • The passphrase — turned into a key with Argon2id, which makes guessing slow. It is never stored.
  • While unlocked — decrypted data exists only in the app's memory. Locking drops it. Photos are never cached to disk.
  • API keys — kept in your system keyring, not the vault.

Not encrypted — handle with care

  • Printed reports, claims and the PDFs you save from them.
  • CSV exports.
  • Copies you save with Save a copy….
  • The printed recovery key sheet — it opens the vault.

Settings → This vault shows where the vault is, its format and encryption.