← Wealth Navigator · Docs

Vault, devices & sync

Wealth Navigator is local-first: the app runs on your own computer and is fully functional offline. A cloud account is optional and adds exactly two things — encrypted sync between your devices, and bank-transaction import.

Sync moves the sealed vault, never readable data. Each upload is a new version with an integrity chain; if two devices change things at the same time, the conflict is surfaced explicitly — you choose to keep this device's version or the server's, and the losing side is parked in a safety copy, never silently discarded.

Adding a device is a pairing ceremony: the new device shows a code, an existing device approves it, and both sides compare a short authentication string so a man-in-the-middle can't slip between them. Each device gets its own key — losing a laptop doesn't mean re-keying your life, just revoking one device.

Leaving is a first-class path: export everything in open formats at any time, and account deletion is immediate erasure on our side, with a bounded window for encrypted backup copies to expire (see the data retention policy).