lukrio
Security and privacy

How we protect your data

Your financial information belongs to you. Here's how we safeguard it with proven technology, clear practices, and no direct access to your bank.

Our 5 security pillars

Transparent about what we do to protect your data.

Encryption in transit and at rest

All communication with our servers travels over TLS 1.3. Your data is stored encrypted with AES-256 in AWS-managed databases.

We never ask for bank credentials

We don't connect to your bank. You log your transactions; we never have access to your accounts, passwords or tokens. If anyone compromises Lukrio, your bank stays untouched.

You own your data

Export your entire history to Excel in one click. Request full account deletion over WhatsApp and your data is erased within 24 hours.

WhatsApp verification

Your account is tied to your verified WhatsApp number. To access the web dashboard, we generate a temporary link that arrives in your email inbox: no passwords to steal.

We only see what we need to help you

Your conversations are not used to train models nor sold to third parties. We process your messages to categorize and respond, nothing more. Receipts you send are analyzed and then stored encrypted in your account.

Key security questions

What if WhatsApp gets hacked?

WhatsApp uses end-to-end encryption. To access your Lukrio account, someone would need your number, your SIM and our temporary link. We recommend enabling two-step verification inside WhatsApp.

Where is my data stored?

On AWS (Amazon Web Services) servers — the same infrastructure used by large banks and fintechs. Data is stored in regions with strong protection standards and geographic redundancy.

What happens to the receipt photos I send?

We process them to extract data (amount, date, category) and store them encrypted in your account. You can delete them anytime from the dashboard or by asking Lukrio. They are never shared with third parties.

Do you sell my data to advertisers?

Never. Our business model is subscription-based: we earn because you pay for the service, not by selling your information. Our privacy policy states this explicitly.

What you can do to stay safer

Security is shared. These best practices help us protect you better:

Questions about security?

Write to us and we'll share every detail. We're transparent because we demand it of ourselves.

Contact the team