Privacy Policy

Last updated: 10 July 2026

Overview

Enamio is an encrypted accounting web app. Your records and attachments are encrypted in your browser before being stored locally or saved to your Enamio account. Backup files are encrypted with the backup PIN you choose. Enamio does not receive decrypted accounting records.

Encrypted app data

The app stores the financial records you enter — practices, income, expenses, BAS information, tax planning settings, receipts, attachments and backups — together with optional details such as your name and ABN. App data and attachments are encrypted with AES-GCM in your browser. Backup files use an encrypted bundle structure and can only be restored with the backup PIN you set.

Account access and trials

To run account access, trials and billing we receive and store the following on Cloudflare infrastructure:

• Email address. Used to sign in with Cloudflare Access, start a trial, complete checkout, attach your plan to your account and provide support.
• Trial metadata. Trial start and expiry dates are stored against a normalized email identity so one person cannot repeatedly restart a trial with email aliases.
• IP address and User-Agent. Requests to our Worker expose your IP address and browser User-Agent. These are used for security, rate limiting and operational troubleshooting.
• Plan and subscription metadata. Your plan, status, expiry, Stripe customer identifier and subscription identifier are stored so Enamio can grant access and manage renewals.

Payments

Payments are processed by Stripe. Enamio does not see or store your full card details. We receive your email address and Stripe identifiers from Stripe in order to provision and maintain your Enamio access. Stripe processes payment information according to its own privacy and security practices.

Cloud data storage

Encrypted account data and encrypted backup bundles may be stored in Cloudflare D1 and R2. These stored files are encrypted before upload. Clearing browser site data can remove local records from that browser, so keep backups or use the account data features provided in the app.

Support

If you email support, we use the information you provide to respond and resolve the issue. We cannot access decrypted Enamio records, attachments or backup contents unless you choose to send us decrypted material. Please avoid sending sensitive financial documents unless they are necessary for support.

Analytics, telemetry and tracking

Enamio does not run behavioural advertising or tracking cookies. Operational requests are handled by Cloudflare for hosting, access control and Worker execution.

Sharing

We do not sell your personal information. We share information only with service providers required to operate Enamio: Stripe for payments, Cloudflare for hosting, access and storage infrastructure, and Resend or email providers for transactional and support email.

Retention

Encrypted app data remains in your browser or account until deleted through app workflows or support processes. On our servers:

• Trial records are retained to prevent repeated free trials.
• Payment and subscription records are retained as needed for access, accounting and dispute-resolution obligations.
• Support email is retained for as long as needed to provide ongoing support and meet record-keeping obligations.

Your choices

You can request access, correction or deletion of personal information associated with your account by emailing support@enamio.au. Some records may need to be retained where required for legal, accounting or security reasons.

Contact

Questions about privacy can be sent to support@enamio.au.