Features Security Try it Academy Pricing Contact
LanguageOpen the app
Home Academy Security — Zero-Knowledge
The heart of Ozorys · Foundations · 8 min

Your data isn't ours, and that's the whole project.

Ozorys isn't a budgeting app that protects your data. It's a data-protection architecture that happens to calculate a budget. This module explains why — and what “Zero-Knowledge” actually means for you.

“If it's free, you're the product”

Most budgeting apps ask you to connect your bank accounts. From that moment on, they read every transaction, every salary, every overdraft — and many make their living from it: profiles resold, targeted advertising, “data” partnerships. Your finances, your most concrete intimacy, become a commodity.

Ozorys takes the opposite stance, with no half measures: no bank connection, no account, no server that knows you. The model fits in one sentence — you pay for the app with a few euros, never with your data.

The real price of “free”

When a finance app is free and lives on advertising, the question isn't whether your data is being exploited, but how. Ozorys refuses that bargain: no adverts, no trackers, no bank aggregator. Ever.

Ozorys's Zero-Knowledge warning screen, shown before the PIN is created
The ZK warning

The founding warning, shown before you even set your first code: Ozorys tells you who holds the key.

The Zero-Knowledge wager

Zero-Knowledge isn't a marketing line: it's a mathematical constraint we impose on ourselves. Your data is encrypted on your device, with a key derived from your secret code alone. What travels to the cloud to sync your devices is nothing but an unreadable block.

The consequence is vertiginous: we cannot read your data. Not “we don't want to” — we cannot. Not to train an algorithm, not under the pressure of a breach of our servers, not even if an authority demanded it. What we don't hold can be neither sold, nor stolen, nor seized.

The golden rule

The only place in the world where your data exists in the clear is your unlocked device. Everywhere else — our servers included — it exists only as encrypted noise.

What our server sees — demonstration

Write a budget line, for example “Rent 1200”. On the left, what you see on your device. On the right, the only thing that exists on our servers. Change a single character: the block is unrecognisable.

On your device
Rent 1200
On our servers

Teaching illustration. The real encryption (AES-256-GCM) happens on your device; this block can only be reconstructed with your key — which we don't have.

How the vault stays cold

We call it Cold Budget Technology : your finances live “cold”, sealed at rest, never warmed up anywhere but before your own eyes. The chain fits in one line — your secret phrase forges a key (600,000 iterations, PBKDF2), that key seals every piece of data (AES-256-GCM) on the device, and only that encrypted version travels. Nobody else holds the key.

“Cold” also means: no hidden processing on our servers, no “we analyse your spending for you” that would require reading you. Calculating the RAV, detecting subscriptions — it all happens on your device. The “Opening your vault” module details the mechanics; the Fortress path turns it into an art.

The right marker

A simple rule for judging any finance app: ask yourself where your data is decrypted. If the answer is “on their servers”, you're not in a vault — you're in a shop window.

What it changes, and what it demands

What you gain: a rare peace of mind. Your income, your debts, your habits sleep on no exploitable server. You're not a profile — you're the sole holder of your vault. That's the “what we will never do” promise — no adverts, no trackers, no aggregator, no readable data server-side — carved into the architecture, not merely into our intentions.

What it demands in return: that you keep the key. Since nobody can restore what nobody can read, your recovery phrase and your backups aren't optional — they are the ramparts of your sovereignty. Three minutes preparing them today buy you permanent peace of mind.

In a word

Sovereignty isn't free: it's paid for in responsibility. Ozorys hands you the keys to a real vault — it's on you not to lose them.

Ozorys's Security Journal: every sensitive event logged locally
The Security Journal

The Security Journal: every sensitive event, logged — at home, for you alone.

Let's check it stuck

Six questions, marked instantly. Your answers never leave this page — obviously.

1. Most free budgeting apps are funded mainly…

Bank connection, profiling, resale: your finances become the commodity. Ozorys reverses that model — you pay for the app, not with your data.

2. “Zero-Knowledge” means that Ozorys…

The key derives from your code alone, on your device. We hold no copy: what we don't possess can be neither sold, nor stolen, nor demanded.

3. Does Ozorys connect to your bank to read your accounts?

No aggregator, no gateway to your bank. You enter and reconcile yourself: that's the condition of a truly closed vault.

4. What travels to the cloud to sync your devices is…

The server stores nothing but noise. The demonstration shows it: change one character, the block changes entirely, and nothing in it is readable.

5. “Cold Budget Technology” means your data is decrypted…

Your finances live “cold”. The RAV, subscription detection: it's all computed at home, never elsewhere.

6. Since nobody can restore a vault nobody can read, your priority is…

The price of sovereignty is responsibility for the key. The recovery phrase and the safety net are your ramparts.

The sovereign's challenge

Ask any finance app you use the only question that matters: where is my data decrypted? Then open Ozorys, check that no bank account is connected, and locate your recovery phrase. In three minutes, you'll know who really holds the key.

Going further

This module is the doorway. The Fortress path covers it all: encryption, from promise to proof, the three-strand safety net, and the defences against prying eyes.

Go further

User guideFoundations path · 26 modulesTry the app