Privacy and Security

How InfinitelyZero protects your data, what information is stored, and how to control your privacy — on web and desktop.

Local storage and privacy

In browser Local mode, each budget's financial state is encrypted at rest in that browser profile's on-device application storage rather than InfinitelyZero Cloud storage. The application may still use network services for authentication, licensing or entitlement checks, updates, and cloud operations that you explicitly request. Local mode is therefore not a promise that the application will make no network requests. For a product overview of keeping a budget on-device, see local budgeting.

Browser/PWA storage does not provide the same persistent OS-backed key custody as a native app, so recovery material may be requested after a refresh or session loss. Encryption does not prevent the browser from deleting the records when site data is cleared.

Local keys and recovery

Local encryption is per budget. One confirmed Local recovery profile can protect additional encrypted Local budgets, using the same stable recovery root. The setup ceremony provides a downloadable recovery kit, verifies that kit by re-import, and can optionally protect a local recovery copy with a passphrase. The complete recovery key is always the fallback.

Warning: Recovery material is not budget data. It can unlock encrypted Local data that still exists, but it cannot recreate deleted data. An encrypted backup is a separate copy and uses its own backup password.

Windows desktop app

Desktop Local data

When you use the Windows desktop app in Local mode, your budget data is stored on your Windows installation. Each Local budget is encrypted at rest. It remains Local unless you deliberately export a backup or copy data to Cloud. Authentication, entitlement checks, updates, or user-requested Cloud actions may still use network services.

Windows protects the budget data-encryption key with a Credential Manager entry backed by DPAPI. These platform wrappers are the normal native unlock path, so recovery material is reserved for setup, an unavailable or invalid device key, reinstall/restore on another device, or an explicit recovery action.

Encrypted desktop backups

Desktop backup files are encrypted with a separate backup password. Encrypted backups protect the contents of exported files — if the file is lost or accessed by someone else, it cannot be opened without the backup password. InfinitelyZero can store the backup password using Windows Credential Manager on the same PC and profile, so you do not need to re-enter it each time. That saved backup password is separate from the Credential Manager entry used to unlock encrypted Local budgets.

Desktop update verification

Direct-download desktop updates use a signed verification process. Microsoft Store installations are installed and updated through Microsoft Store instead of the direct-download updater.

Desktop Cloud mode

When using the desktop app in Cloud mode, your budget data is sent to and stored in InfinitelyZero's Cloud service, using the same encrypted connections (HTTPS/TLS) as the web app.

Connected Cloud storage security

Network traffic between your device and InfinitelyZero's Cloud service uses HTTPS/TLS. Cloud budget data is stored in the Cloud service and access is associated with your account. Your account is protected by email-based authentication. We recommend using a strong, unique email address for your InfinitelyZero account.

Your data

InfinitelyZero does not sell your data. We do not share your financial data with third parties for advertising or marketing purposes. For full details, see the Privacy Policy. Questions about your data or data deletion can be sent to support@infinitelyzero.com.

Optional online services

Local budget persistence does not create an InfinitelyZero Cloud copy merely because you sign in. Optional online features can still send limited, task-specific information to the service needed to perform that task. Examples include UPC/product lookup, shopping-area lookup, and provider-backed receipt scanning.

Provider-backed features are optional and may require an internet connection. Receipt images are sent when you choose an AI-backed scan and are not intended as long-term InfinitelyZero budget storage. Parsed information you explicitly apply follows your selected Local or Cloud storage mode. Personal Price Book and receipt data are not automatically published.

Note: Only the minimum task-specific context should be sent for provider-backed work. Provider interpretation can be imperfect and is never authoritative over deterministic financial calculations.