Salli combines encrypted local storage with an optional operating-system
authentication gate.
Database encryption
On Android and iOS, the Drift/SQLite database is opened through SQLCipher. A
random key is kept in platform secure storage. The production store refuses to
open an unencrypted database as if it were valid.
App lock
Enable More → Settings → Security → App lock. On launch or return to a
locked state, Salli asks the device for biometric or device-PIN verification.
The authentication stays inside the platform’s secure prompt. Salli does not
receive or store your fingerprint, face template, or PIN.
What app lock is not
- It is not a Salli password or online account.
- It does not encrypt exported clipboard data.
- It cannot protect a screenshot you intentionally take.
- It does not replace the device passcode or OS security updates.
- Local reminders hide merchant, circle, and amount by default.
- Android widget values are masked until the separate Show amounts on
widget switch is enabled.
- The widget stores only a bounded display snapshot in private app
preferences; it does not open the encrypted ledger.
Logs
Production behavior must not write plaintext financial data, raw SMS, or
secrets to logs or crash reports.
Use app lock together with a strong device passcode and keep exported
backups only in a trusted encrypted location.
