Skip to main content

Encryption and app lock

How Salli protects local data at rest and gates the app with device authentication.

Salli combines encrypted local storage with an optional operating-system authentication gate.

Database encryption​

On Android and iOS, the Drift/SQLite database is opened through SQLCipher. A random key is kept in platform secure storage. The production store refuses to open an unencrypted database as if it were valid.

App lock​

Enable More → Settings → Security → App lock. On launch or return to a locked state, Salli asks the device for biometric or device-PIN verification.

The authentication stays inside the platform's secure prompt. Salli does not receive or store your fingerprint, face template, or PIN.

What app lock is not​

  • It is not a Salli password or online account.
  • It does not encrypt exported clipboard data.
  • It cannot protect a screenshot you intentionally take.
  • It does not replace the device passcode or OS security updates.

Notification and widget privacy​

  • Local reminders hide merchant, circle, and amount by default.
  • Android widget values are masked until the separate Show amounts on widget switch is enabled.
  • The widget stores only a bounded display snapshot in private app preferences; it does not open the encrypted ledger.

Logs​

Production behavior must not write plaintext financial data, raw SMS, or secrets to logs or crash reports.