Security

Last updated: July 31, 2026

Your financial data deserves real protection, not just a promise. Here's exactly how TrovaMoney protects your account and your data.

Account protection

Password-protected accounts, handled through Supabase's authentication system — TrovaMoney never stores your password in plain text.
One active session at a time. If your account is opened on a new device or browser, any other active session is automatically signed out within seconds — so an old, forgotten login can't quietly stay active.
Automatic sign-out after 15 minutes of inactivity, so a device left unlocked doesn't leave your account open indefinitely.
Show/hide toggle on every password field, so you can verify what you've typed without guessing.

Row-level security on every table. Your data is scoped to your account (and, if you've joined one, your household) at the database level — not just hidden in the app's interface.
Export your data anytime as a full backup file from Settings.
Delete your data or your account, anytime, yourself — no support ticket required. Both require typing "DELETE" to confirm, and both are irreversible once confirmed. Deleting your data runs as a single all-or-nothing operation, so it either completes fully or doesn't happen at all — never a partial, inconsistent result.

Payments are processed entirely by Razorpay, a licensed Indian payment processor. TrovaMoney never sees or stores your card, UPI, or bank details directly.
Subscriptions can be cancelled anytime, with access continuing through whatever you've already paid for.

TrovaMoney runs on Supabase, with data encrypted in transit.
We don't sell your data, and we don't show ads. See our Privacy Policy for the complete picture of what's collected and why.

If you have a specific security question or want to report a concern, reach us at support@trovamoney.com or via Contact Us.