The encrypted portfolio tracker that can’t read your data - even if we wanted to.
Every transaction is encrypted on your device with AES-256-GCM before it ever reaches our servers. We don’t store your holdings. We store ciphertext. That’s the whole pitch - and it’s also why a few conveniences you’re used to elsewhere aren’t here, on purpose.
Why this exists
You’ve read a privacy policy that made you close the tab.
Most portfolio trackers ask you to link broker credentials, then store your holdings and net worth in plain, readable form on their servers - because that’s what their features require. Turbobulls makes a different trade: the server is built so it structurally cannot read your transactions. Not a promise - a missing capability.
Free "aggregator" apps
Read-only broker login required. The revenue model often includes selling de-identified financial data to "trusted partners."
Server-side trackers
The industry default. Your holdings sit in a readable database, protected only by access controls, promises and TLS.
Spreadsheets
Private by default, but no encryption, no backup, no sync - one lost laptop away from gone for good.
How it actually works
No hand-waving: the real algorithms, in order.
This is the part most “encrypted” apps skip. Here’s the actual path your data takes between you typing a transaction and it hitting our database.
Click a step to pin it - it stays that way for a few seconds before returning to auto-play.
What we actually see
Toggle between your view and ours.
We won’t pretend every field is a secret - the action and the timestamp are stored in the clear, the same as most apps. What’s different is everything that actually matters: the ticker, the quantity, the price, the total. That’s the part that only ever exists as ciphertext on our side.
- Which stock you traded - encrypted
- Quantity, price and totals - encrypted
- Which broker or account - encrypted
- The action and timestamp - stored in the clear, same as most apps
This is what you see once your device decrypts it.
The honest trade-off
What you give up for this - and why we think it’s the right call.
Radical honesty: this architecture has real costs today, and we’d rather you know them upfront than discover them after you’ve moved your portfolio over. Click a card for how we’d actually close each gap.
Every shortcut to auto-sync or sharing runs through the same door: a server that can read your financial life. We’re not ruling either one out - we just won’t ship a version that quietly reintroduces server-side plaintext to get there faster. Today that means CSV import and no sharing; the versions we’d actually ship keep the model intact, even if they take longer to build.
The forgotten-password problem
If we can’t read your data, how do you get back in when you forget your password?
Every zero-knowledge product has to answer this honestly, because it’s the flip side of the same design: if we can’t decrypt your data, we also can’t reset your password for you the way a normal app would. There’s no “forgot password” email that quietly restores access, because there’s no server-side copy of anything to restore from.
The answer is a Recovery Key - a separate credential you generate and save at setup. It exists specifically so a forgotten password isn’t automatically fatal: if you’ve saved your Recovery Key, it can unlock your workspace independently of your password.
If you lose both your password and your Recovery Key, your data cannot be recovered - not by us, not by anyone. That’s not a support limitation, it’s the same property that keeps your data unreadable to everyone else.
Capabilities
Full-featured doesn’t mean we cut corners to get there.
Zero-knowledge is the foundation, not the whole product. Everything below runs on top of the architecture described above.
Encrypted sync across devices
Your workspace follows you, still unreadable to us in transit or at rest.
Offline-capable PWA
Install it, use it without a connection - sync resumes encrypted when you’re back online.
Multi-currency tracking
FX and native-currency tracking across 30+ currencies.
Dividend tracking
Auto-import, yield and growth analytics across 180k+ tickers.
Expense tracking
The full income-and-spending picture, next to your portfolio.
Custom assets & watchlist
Track anything, not just what a broker feed recognizes.
No ads, no data brokers
Not a promise we need encryption to keep - but one we make anyway.
EU-based infrastructure
Hosted in the EU, with vendors bound by GDPR-aligned data processing agreements.
Built for
People who read the privacy policy before the pricing page
Anyone who read a competitor’s privacy policy, hit the words “trusted partners” or “anonymized data,” and closed the tab.
Not the right fit: anyone whose top priority is one-click broker auto-sync or live portfolio sharing today - we’d rather you know that now than after import.
FAQ
Answers to common questions.
Track your portfolio. Keep it unreadable to everyone else.
Free for 14 days. No credit card, no broker login required.