Your data stays on your device by default. There is no owllet account or company financial-data server; private iCloud sync, backups, and invited workspace sharing happen only when you choose them.
Set a 6-digit PIN to lock the app. Without the correct code, nobody can see your transactions, account balances, or any other data stored in owllet — even if they have access to your device.
Enable Face ID or Touch ID for faster access on a cold launch. Returning from the background still requires the PIN. owllet never receives biometric data — Apple's local authentication only reports whether the check passed.
The app locks itself every time you switch away from it — whether you check a message, take a call, or just put your phone down. Your finances stay private without you having to think about it.
When the app is locked, owllet hides its screen contents in the task switcher. No account balances or transaction details appear as a thumbnail — your data stays out of sight even there.
If biometric recognition fails or isn't available, owllet always falls back to your PIN. You're never locked out of your own data — the PIN remains the master credential at all times.
Back up your transactions at any time by exporting them to a spreadsheet. If you reinstall the app or switch devices, you can import the file back and restore your history exactly as it was.
Creating a workspace does not upload or share it. Data stays on the device unless you enable private sync, create an iCloud backup, or send or accept a workspace invitation. Everyday budgeting continues to work offline.
Private sync and backups use the CloudKit database of your Apple Account. A workspace reaches another person only after you send or accept an Apple invitation. The developer is not an intermediary and cannot read the data.