Security
The safest data is data we never have. Gobboo is built so that the most dangerous things a finance app can hold aren't here to lose.
What Gobboo never holds
- Your bank login. Gobboo doesn't connect to your bank, so there's no bank connection for anyone to misuse. You enter your own figures.
- Your passwords for other websites. Entries can hold a company's name, phone number, website and your username there, but never your password. Keep those in a password manager.
- Your card number. Payments are entered directly into Stripe's secure form and processed by Stripe. Gobboo never sees or stores card details.
- Your Social Security number or other government ID. We never ask for it.
How we protect what you do enter
- Encrypted in transit. Every connection to Gobboo uses HTTPS.
- Encrypted at rest. Your budget is stored with our database provider, Supabase, which encrypts stored data.
- Separated by account. Rules in the database itself, not just in the app, limit every account to its own data. One user can't read another's budget, even by tampering with the app.
- Passwords stored safely. Your Gobboo password is kept only as a one-way hash, so it can't be read, including by us.
- Limited access. Only Gobboo's operator has administrative access to the database. We use it to keep the service running and to fix problems, not to browse anyone's budget.
Family plans
On a Family plan, the owner can open each member's account to see or change their budget. Members can't see the owner's budget or each other's. Only join a Family plan with someone you trust with that access.
What you can do
- Use a password for Gobboo that you don't use anywhere else.
- Sign out when you use a shared or public computer.
- Tell us right away at support@gobboo.com if anything in your account looks wrong.
Reporting a security problem
If you think you've found a vulnerability, please email support@gobboo.com with the details. Please don't access other people's data or disrupt the service while investigating. We'll acknowledge your report, keep you updated, and fix confirmed problems as quickly as we can.
More about what we collect and your choices is in our Privacy Policy.