Privacy by design

We built Sift so we can't see your money.

Bank statements are some of the most sensitive documents you own. So Sift doesn't upload them. Everything is read, sorted and stored on your own device. Here is exactly how that works.

Your device

Where your money data lives

  1. 1. You add a statement PDFFrom your bank, on your phone or laptop
  2. 2. Your browser reads itSift's code runs here. The file isn't sent anywhere.
  3. 3. Stored encrypted on this deviceWith a key your browser keeps locked away

Dashboard, transactions, budgets and forecasts are all worked out right here.

sign-in details only
Sift server

Knows who you are, not what you spend

  • โ€ขEmail and username
  • โ€ขPassword (hashed)
  • โ€ขQuestions left and payments
Never stored here: statements, transactions, balances, account numbers.
only when you ask
โœฆ Ask Sift

A summary, for one answer

When you ask a question, your browser sends a short summary of your totals with it. Our AI provider writes the answer. Nothing is kept.

No statement. No account numbers. Not stored.

What lives where

Your statement PDFs
Your device
Opened and read inside your browser. Never uploaded.
Transactions, balances and categories
Your device
Stored encrypted in your browser on this device.
Your account numbers
Your device
Stay on your device. Never sent anywhere, not even with Ask Sift.
Budgets, rules and notes
Your device
Stored with your transactions, on your device.
Email, username and password
Sift server
Needed to sign you in. Passwords are stored hashed, never in plain text.
Google account id
Sift server
Only if you sign in with Google. We never see your Google password.
Question credits and payments
Sift server
How many Ask Sift questions you have, and payment receipts. Card details go to Paystack, never to us.
A summary of your totals
Only when you ask
Sent only when you ask a question, to answer it. Not stored.

Protections built in

Encrypted on your device

Your data is locked with AES-256 using a key your browser creates and never lets out, not even to Sift.

Signed out when idle

After 10 minutes without activity, Sift signs you out, on every tab.

Backups only you can open

Moving devices? Download a backup locked with a passphrase you choose. We can't open it.

Verified sign-in

Every account is confirmed by an email code or Google, and sign-in attempts are rate-limited.

The honest trade-off

Because we never hold your data, we can't recover it. If you clear your browser or lose the device, your statements and categories go with it, unless you've downloaded a backup.

Your statements are still at your bank, so you can always add them again.

Questions people ask

Can anyone at Sift see my transactions?+

No. They never reach our servers, so there is nothing for us to look at, sell or lose.

Do you connect to my bank account?+

No. Sift never asks for bank logins, BVN or card details. You choose which statements to add, and you can remove them any time.

What exactly does Ask Sift send?+

A short summary your browser builds from your data: monthly money in and out, totals by category, your top payees with amounts, and recurring payments. Never the statement itself and never account numbers. It goes to our AI provider (Moonshot AI) to produce the answer and isn't stored by us. See the privacy policy.

What if Sift's server were ever breached?+

An attacker would find emails, usernames, hashed passwords and question counts. No statements, transactions or balances, because they were never there.

What about someone using my computer?+

Sift signs you out after 10 minutes of inactivity. On a shared computer, use Settings โ†’ Remove local data when you're done; your account stays and you can add statements again later.

Can I delete everything?+

Yes. Remove local data clears this device. Delete account (in Settings) removes your account and credits from our server.