Security information

Last updated: 15 October 2026

This page describes the current design and reporting path for PesaPlanner and PesaFlow. It is not a certification or guarantee that a device, network, account, or exported file is risk-free.

Current safeguards

• The core app is designed to keep finance records on the device and work offline.
• Android automatic app backup is disabled and cleartext network traffic is disallowed in the current manifest.
• Configured subscription calls use HTTPS. Subscription/payment features are disabled until the publisher configures plans and credentials.
• SMS import and notification access are user-controlled Android permissions; parsing is performed locally.

Known release work

The current app source does not encrypt its Room database with app-level encryption. The app lock PIN uses salted SHA-256, which should be replaced with a slow, salted password derivation method and rate-limited attempts. User-created backup/export files are readable. These facts are disclosed in the privacy notice; stronger database/key protection is a release-readiness item.

Report a security concern

Contact [MONITORED SECURITY / PRIVACY EMAIL]. Include the affected version, a description, and steps to reproduce. Do not include financial statements, passwords, M-Pesa PINs, full recovery keys, or other people’s personal data. Please allow time for investigation before public disclosure. The publisher must replace this placeholder with an inbox it actively monitors before publication.

For personal-data requests, see data deletion. For data-handling details, see privacy.