en
Backups & Cloud Sync

Backups & Cloud Sync

StreetLoans stores core operations on the Android device so field work can continue when connectivity is unavailable. Backups are therefore critical: if a phone is damaged, lost, or replaced, a recent backup can help recover the available records.

StreetLoans includes a local backup vault and, when enabled by the user, backup synchronization with Google Drive on Android. iOS support may be evaluated in a future stage and is not documented as available.

1. How backups work

Each backup packages the data into a .slbackup.json file protected with encryption. Final security also depends on the password selected by the user, device protection, and how exported files are stored.

Current format: authenticated SLB2

New backups use this format:

SLB2:{version}:{kdf}:{iterations}:{base64_salt}:{base64_iv}:{base64_ciphertext}:{base64_hmac}

The current implementation encrypts with AES-256-CBC and applies Encrypt-then-MAC with HMAC-SHA256. The HMAC is verified before decryption so modified, corrupt, or wrong-key backup files are rejected before restore.

Depending on what the user has entered, the backup may include:

  • Customer directory.

  • Active and closed loans.

  • Payment, partial payment, and late fee history.

  • Business configuration required to operate the app.

Technical note: StreetLoans keeps read compatibility with older SLB1 backups so existing users are not blocked from restoration. New backups should be written as SLB2.

2. Key derivation and periodic review

The backup key is derived with PBKDF2-HMAC-SHA256 and a unique salt. The work factor should be reviewed periodically to maintain a practical balance between brute-force resistance and performance on lower-end Android devices.

If you forget the cryptographic backup password, the StreetLoans team cannot decrypt that backup file for you.

3. Local vault and restore points

  • Local vault: the app keeps backups in the application's private storage when they are created from StreetLoans.

  • Restore point: before overwriting the local database during restoration, the app may create a safety backup to reduce accidental data-loss risk.

  • User responsibility: if you export the file outside the app, store it in a protected place and avoid sharing it through unsafe channels.

4. Google Drive synchronization on Android

When synchronization is available and enabled by the user, StreetLoans can store encrypted backups in the user's personal Google Drive account. Internet access is required to sync, download, or restore from cloud storage.

Only Google Drive on Android is documented for optional cloud backup at this stage.

5. Create and export a manual backup

  1. Open Settings.

  2. Go to Database & Backups.

  3. Tap Create Backup.

  4. To keep a copy outside the phone, use Export Backup and select a secure destination.

6. Restore your data

  1. From Google Drive, if synchronization is enabled: sign in, open Settings > Database & Backups, and select the available restore option.

  2. From a local file: copy the .slbackup.json file to the new phone, select Restore Backup, choose the file, and enter the backup password.

The app should reject tampered or corrupt backups before restoration.

Theme Settings