Security and privacy
EasyFin never receives your bank login. North American connections are made through Plaid and Ukrainian ones through Monobank's own authorization, so you authenticate with the provider and EasyFin holds a token you can revoke. The app can be locked with a PIN or Face ID, sign-in tokens rotate and can be revoked, and EasyFin is funded by subscriptions — there are no ads, no referral fees and no data sales.
Your bank credentials never reach us
Connections to North American banks are made through Plaid, and Ukrainian accounts through Monobank's own authorization flow. In both cases you authenticate with the provider, not with EasyFin, and what EasyFin holds is a token that you can revoke at any time from inside the app.
Access control on every request
Requests are authenticated at the edge before they reach the application. Tokens are signed with RS256 and validated against a published key, refresh tokens rotate on use and can be revoked, and repeated failed sign-in attempts lock the account rather than allowing an unlimited guessing rate.
On your device
You can require a PIN or Face ID to open the app. The PIN is stored with PBKDF2 in the device keychain, so someone with your unlocked phone still cannot open your finances.
How we make money
Subscriptions, and nothing else. EasyFin does not run ads, does not take referral fees for financial products and does not sell data. Several free personal finance apps are funded by advertising or by selling wealth management to the people who link the largest balances; that is a different arrangement and it is worth knowing which one you are in.
Reporting a vulnerability
Email support@easyfin.app with the details and we will respond. Please give us a chance to fix an issue before disclosing it publicly.
Frequently asked questions
- Does EasyFin store my bank login details?
- No. Bank connections go through Plaid for North American institutions and through Monobank's own authorization for Ukrainian accounts. You enter your credentials with your bank or with Plaid, never with EasyFin, and EasyFin receives a revocable access token rather than a password.
- Does EasyFin sell my financial data?
- No. EasyFin is funded by subscriptions. There are no ads, no partner offers and no advisory upsell, and your transaction data is not sold or shared for marketing.
- Can I lock the app on my phone?
- Yes. EasyFin supports a PIN, stored using PBKDF2 in the device keychain rather than as plain text, and Face ID or Touch ID unlock.
- What happens if I stop paying for Pro?
- You move to the free plan and keep your data. Accounts and transactions beyond the free limits become read-only rather than being deleted.
Try EasyFin free
Three accounts and 300 transactions a month, free forever. No card required.
Get EasyFin