A privacy policy is a promise. Architecture is a guarantee. Your portfolio lives in a database on your machine. There is no server copy to breach, sell or subpoena.
You sign in on your broker's own page, opened inside a Tukhe window on your machine, with the two-factor authentication your broker provides. Nothing stands in between: no aggregator, no third-party server. The connection runs from your machine to your broker and back.
YOUR BROKER'S LOGIN PAGE
The real page, served by your broker, with its 2FA.
THE WINDOW CLOSES
Once your account is read, the sign-in window is destroyed. No password or token is kept.
TUKHE SERVERSNever receive a password, a token or a session. There is nothing to leak.
Most privacy lives in a policy you have to trust. Tukhe's lives in the architecture, where you can check it.
LOCAL DATABASE
Positions, transactions and settings sit in local database files on your computer. Tukhe reads and writes them there. We never see them. If Tukhe disappeared tomorrow, your data would still be on your disk.
Your data folder
NO ACCOUNT
No email, no password, no onboarding wall. Your 7-day free trial starts on your device. When you choose Plus or Pro, you pay through our payment provider: it sees the card, we never do.
NO FIGURES OUT
What does leave, listed on this page, never carries an amount, a quantity, a value or an account number.
BUILT SAFE
Tukhe's core is written in Rust, which rules out memory-safety bugs at compile time. One small binary, a small surface, fewer places to attack.
The instruments you hold, under a pseudonym
To price your portfolio, the Tukhe market data service receives the list of instruments in it. Never a quantity, never a value, never your name. Requests are keyed to a device pseudonym. These daily lists are kept 13 months, so a season can be compared with the same season a year before, and are deleted after.
Your license key and this device
The app checks its license with the key and identifiers of this machine, so a license runs where it should. Nothing from your portfolio goes with it.
How the app is used, without an account number
Launches, time with the app open, the app version and your system, and which brokers you sync. During the 7-day trial, anonymous usage stats as well, which Settings turns off.
Never
Your quantities, values, account numbers and transaction history. None of it leaves your machine, and there is no server copy of your portfolio anywhere.