How CaixaUnica protects your financial data

Trusting your financial data to an app is a serious decision — and you have every right to be demanding. So instead of vague promises, here is, plainly, how CaixaUnica protects your information and why you stay in control from start to finish.

Your data is yours

This is the principle behind everything. CaixaUnica does not sell your data and does not share it with advertisers. Our model is simple: you pay for the product, and the product works for you — not for third parties interested in your spending profile. Your statements, balances and categories exist to give you financial clarity, and nothing else.

Protected access to your account

The front door to your account is handled with care:

• Optional two-factor authentication (2FA). You can turn on a second verification layer, so knowing your password isn't enough to get in.
• Secure password handling. Your password is never stored in plain text — it goes through a protection process that keeps it from being read, even internally.

Encryption where it matters

Data protection happens in two moments:

• In transit. All communication between your browser and CaixaUnica runs over HTTPS/TLS, end to end. In practice, no one along the way can intercept what travels.
• At rest. Sensitive data — like your CPF (Brazilian taxpayer ID) and your two-factor authentication secrets — is encrypted before being stored. Bank credentials don't even exist here: CaixaUnica never receives them.

Built around the LGPD

CaixaUnica is designed around Brazil's General Data Protection Law (LGPD). What that means for you in practice:

• Consent. Your data is handled based on what you authorize.
• Export. You can take your data with you — it's not held hostage by the platform.
• Deletion. You can request the removal of your data whenever you want.

The LGPD isn't just a formality here: it's the ruler we use to decide what to do (and what to never do) with your information.

Open Finance: your bank password never passes through us

When you connect a bank through Open Finance, the authorization happens inside your own bank's environment. This is part of the standard regulated by the Central Bank of Brazil, and it has one important consequence:

• CaixaUnica never receives your bank password. You confirm the sharing at your institution, with its security.
• Revocable consent. You decide what to share and can cancel at any time — through your bank or through CaixaUnica.

In other words: the connection is convenient, but control stays yours.

Your data isn't lost

We run regular backups so that, even in the face of a failure, your financial history doesn't disappear. The idea is that you never have to start from scratch or redo months of organizing.

Safe by design, and in your control

Put the pieces together and the design is clear: protected access, encryption where it matters, bank connections where the password never passes through us, LGPD compliance and backups behind it all. None of this requires you to be a security expert — it's simply how CaixaUnica works by default.

And at every point, the final word is yours: you choose what to connect, what to share and what to keep. You can export anytime and leave anytime, taking your data with you.

Organizing your financial life is work enough. Keeping it secure is our part.

Create your free 14-day account

Sources

• Lei 13.709/2018 (LGPD — Brazil's General Data Protection Law) — consent as a legal basis (art. 7, I) and the portability (art. 18, V) and deletion (art. 18, VI) rights described above.
• Resolução Conjunta nº 1/2020 (BCB/CMN — the joint resolution implementing Open Finance) — customer authentication carried out by the institution holding the account (art. 16) and revocation of consent at any time (art. 15).
• Open Finance — Banco Central do Brasil — the official page of the regime regulated by the Central Bank.