Encrypted on your device. Unreadable on ours.
Turbobulls is an encrypted portfolio tracker. Your portfolio and wallet data are locked on your device before they leave it, and what reaches our servers is ciphertext that only your password can unlock. That is why we cannot read it, and why a few conveniences other apps offer are missing here, on purpose.
Why this exists
The usual tracker keeps a copy it can read. We keep one only you can open.
The usual tracker asks for your broker login and keeps your holdings in a database it can read, because its features need that. Turbobulls is built the other way round. Your data is encrypted on your device, so our servers cannot read it. That is not a promise we make. It is a capability we do not have.
Apps that log into your broker
You hand over your broker login. Often free because de-identified financial data is sold on to "trusted partners".
Server-side trackers
The industry default. Your holdings sit in a database the company can read, protected by access rules and promises.
Spreadsheets
Private, but not encrypted, not backed up and not synced. One lost laptop and it is gone.
How it works
The actual path your data takes.
This is the part most “encrypted” apps skip. Here is what happens between you typing a transaction and it reaching our database, with the real algorithm names.
Click a step to pause on it. It resumes on its own after a few seconds.
What we can see
Your view, and ours.
Not every field is secret. The type of transaction and its timestamp are stored readable, the same as in most apps. Everything that matters is not: which stock, how much, at what price.
The same goes for your accounts and balances, your budgets and the amounts you assign, your categories, brokers, tags and custom assets. Everything you create inside a workspace only ever exists as ciphertext on our side.
- Which stock you traded - encrypted
- Quantity, price and totals - encrypted
- Accounts, balances, brokers and categories - encrypted
- Budgets and every amount you assign - encrypted
- Tags, notes and custom assets - encrypted
- Transaction type and timestamp - readable, same as most apps
- Which instruments you look up prices for - visible to us, because prices are public data fetched by name
What you see after your device decrypts it.
Why the copy matters
Careful companies get breached too.
None of the companies below is small or careless, and not every entry is a hack. The point is narrower: a readable copy of your financial data is a target for as long as it exists, and no amount of care changes that.
Robinhood2026Phishing through its own emails
Not a breach of Robinhood’s systems. Attackers abused a flaw in the account sign-up flow so that Robinhood’s own servers sent the phishing emails, which passed every authenticity check because they were genuine Robinhood emails. The addresses they targeted most likely came from Robinhood’s 2021 breach of about 7 million customers, still circulating five years on.
Checked September 2026 against BleepingComputer.
Coinbase2025Bribed support staff
Criminals paid overseas support contractors to pull customer records out of internal systems: names, addresses, ID images, balance snapshots and transaction history for about 69,000 customers. They then phoned those customers pretending to be Coinbase, and some sent money. Coinbase put the cost at $180 million to $400 million.
Checked September 2026 against SEC filing.
Snowflake2024Stolen customer logins
Snowflake itself was not breached. Attackers used customer logins stolen by malware, on accounts with no second factor, to pull data out of the cloud databases of about 165 organisations. Whatever the account could read, they could read too.
Checked September 2026 against Mandiant.
Zacks2024Third leak in four years
An investment-research firm. Records of about 12 million users, including names, addresses, phone numbers and password hashes, were taken in June 2024 and posted online. Earlier leaks had exposed 820,000 and 8.8 million accounts.
Checked September 2026 against BleepingComputer.
Morgan Stanley2022Discarded servers
Not a hack. The SEC fined Morgan Stanley Smith Barney $35 million because, over about five years, it had handed retired servers and hard drives to a moving company with no data-destruction experience. Thousands were sold on, some still holding the unencrypted details of around 15 million customers. The devices had encryption built in. Nobody had switched it on.
Checked September 2026 against the SEC.
Plaid2022$58 million settlement
Not a breach. The bank-connection service behind many finance apps settled a class action for $58 million, approved by the court in July 2022, over claims that it used people’s bank logins to collect transaction data without proper consent. The business model itself was what went to court.
Checked September 2026 against the final-approval notice.
Capital One2019One misconfigured setting
A bank. One misconfigured setting in its own web application let a single outsider copy the credit card applications of about 106 million people in the United States and Canada, including some 140,000 Social Security numbers and 80,000 bank account numbers.
Checked September 2026 against Wikipedia.
Equifax2017Unpatched software
A credit bureau. A software fix had been available since March 2017 and was never applied. Between May and July, attackers walked through the gap and took the records of 147.9 million Americans, 15.2 million British and about 19,000 Canadian residents. Equifax later settled for $575 million.
Checked September 2026 against Wikipedia.
There is nothing here worth stealing. Encrypting on your device does not make a break-in impossible. It changes what a break-in gets. Your portfolio and wallet data sit on our servers as ciphertext, and the key that opens them never leaves your device, so an intruder would walk away with numbers they cannot read: nothing to trade on, nothing to sell, nothing to phone you about. What they could take is your email address, plus the type and timestamp of each record without any of its contents. Card details never reach us at all; Stripe holds those. We would rather say that plainly than pretend otherwise.
Who can read it
Same portfolio, three places to keep it.
A spreadsheet, a tracker that stores it on its own servers, or one that encrypts it on your device first. Here is what each one lets other people see.
| Question | A spreadsheet Excel, Google Sheets | A typical tracker Server-side, often with a broker login | Turbobulls End-to-end encrypted |
|---|---|---|---|
| Where your data is encrypted | No: Not by you. Your cloud drive may, with its own keys | No: On their servers, with keys they hold | Yes: On your device. The key never leaves it. |
| Who can read your holdings | No: Anyone who gets the file | No: The company, and anyone who gets into its servers | Yes: Only you |
| Asks for your broker login | Yes: No | It depends: Often | Yes: Never |
| What a breach would expose | No: The whole file | No: Your full financial picture | Yes: Ciphertext, plus your email address |
| Can staff or a court order get readable data | It depends: Yes, if it sits in a cloud drive | No: Yes | Yes: No. There is no readable copy to hand over |
| Where it is hosted | It depends: Your computer, or your cloud drive's servers | It depends: Depends on the company | Yes: EU servers in Frankfurt |
| If you forget your password | It depends: No password involved | It depends: Reset by email | It depends: Only your Recovery Key gets you back in |
| Automatic broker sync | No: No | Yes: Often | No: Not yet, and only in a way the server cannot read |
| Export your data | Yes: It is already a file | It depends: Depends on the product | Yes: Always, on every plan |
“A typical tracker” covers most portfolio apps, including the free ones that log into your broker for you. “Often” means common in that group, not universal. This table compares ways of building a tracker, not named products.
For names, see how Turbobulls compares with getquin, Sharesight, Snowball Analytics and Parqet.
The forgotten-password problem
If we can’t read your data, how do you get back in when you forget your password?
Every end-to-end encrypted product has to answer this, because it is the flip side of the same design. If we cannot decrypt your data, we also cannot reset your workspace password the way a normal app would. There is no “forgot password” email that quietly restores access, because there is no readable copy on our side to restore from.
The answer is a Recovery Key: a separate code you generate and save when you create your workspace, or later from its settings. If you forget your password, the Recovery Key unlocks your workspace on its own.
If you lose both your password and your Recovery Key, your data cannot be recovered. Not by us, not by anyone. That is not a support limitation. It is the same property that keeps your data unreadable to everyone else.
Capabilities
Encryption is the foundation, not the whole product.
Everything below runs on top of the architecture described above. End-to-end encryption is on every plan, free included.
Encrypted sync across devices
Your workspace follows you to every device, still unreadable to us on the way and at rest.
Works offline
Install it as an app and use it without a connection. It syncs, still encrypted, when you are back online.
Multi-currency tracking
Holdings in 30+ currencies, with exchange rates applied on the trade date.
Dividend tracking
Dividend history with withholding tax captured and netted, across global markets.
Expense tracking
Income and spending next to your portfolio, in the same encrypted workspace.
Custom assets and watchlist
Track anything, not only what a broker feed recognises.
No ads, no data brokers
We do not sell data and we do not run advertising trackers in the app.
Portfolio health score
Rule-based checks and insights across your whole portfolio.
Built for
People who read the privacy policy before the pricing page
Anyone who opened a competitor’s privacy policy, saw “trusted partners” or “anonymised data”, and closed the tab.
Not the right fit: anyone who needs one-click broker sync or live portfolio sharing today. We would rather you know that now than after you import.
FAQ
Answers to common questions.
Security reports
If something on this page is wrong, we want to know.
The architecture above is the whole claim: your data is encrypted on your device, and what reaches our database is ciphertext. If anything on this page does not match what the app actually does, that is a security report and we treat it as one.
Security reports go to security@turbobulls.com. We acknowledge within 72 hours, assess within 7 days, publish what changed, and credit the person who found it.
Track your portfolio. Keep it unreadable to everyone else.
Every account starts with 14 days of everything, no card and no broker login. When the trial ends you keep a free plan - no time limit, nothing deleted, and the encryption is exactly the same on it.