Security

We protect your account and your shared ledgers with modern, minimal-by-design security.

In transit

Every connection is encrypted with modern TLS.

Your KiruShare account

• Your KiruShare account is its own, separate from every other KiruS app, so what happens here stays here.
• Passwords stored only as strong one-way hashes (bcrypt). Never readable, never visible to us.
• Signed, short-lived session tokens; sign-out clears them.
• Optional app lock (Face ID / fingerprint / passcode) that re-arms when you leave the app.
• Our own authentication. No handing your identity to third-party trackers.

Leaving is as easy as arriving

• Delete your KiruShare account from inside the app: More → Data → Delete my KiruShare account.
• It asks for your password and a fresh code emailed to you. Nobody deletes your ledger by picking up your phone.
• 24 hours to change your mind; permanently gone within 48.
• It deletes KiruShare only. Your other KiruS apps are untouched.

Minimal by design

KiruShare holds only what's needed to split an expense (no bank links, no payment data), which keeps the surface for harm small.

Responsible disclosure

Found a security issue? Please tell us quietly first: info@kirusai.com.