Why Client-Side AES-256 Encryption Matters for Personal Finance

Financial data is among the most sensitive personal information you own. Traditional cloud apps store your records unencrypted on backend servers where employees or third parties could theoretically inspect them. ### Zero-Knowledge Security Philosophy AavakJavak uses client-side AES-256 GCM encryption. Your master key is derived locally on your device. When data is saved to SQLite or synced to the cloud, it is already encrypted. ### Row-Level Security (RLS) On the database server, PostgreSQL Row-Level Security policies enforce tenant isolation so no user can query another tenant's financial workspace.