Security & privacy

Your money stays put. Your data stays yours.

A plain-English guide to how OurJamJar connects to your bank, what it can and can’t do, and how we look after your information.

How bank feeds work

OurJamJar doesn’t connect to your bank directly. We use Akahu, a New Zealand open-finance provider that many local money apps use to receive bank data.

  1. You start the connection from OurJamJar, which hands you over to Akahu’s secure screens.
  2. You sign in and choose what to share — which bank, and which accounts. Your banking login goes to Akahu or your bank, never to OurJamJar.
  3. You approve read-only access. Akahu then sends us transactions and balances for the accounts you picked.
  4. You can take it back. Revoke access at any time from your Akahu account and the feed stops.

Prefer not to connect at all? You can upload CSV statements exported from internet banking instead.

What OurJamJar can and can’t do

It can

  • Read transactions and balances for the accounts you choose
  • Categorise them and build your budget, reports and projections
  • Show the same household budget to people you invite

It can’t

  • Move money, make payments or transfers
  • Change anything in your bank accounts
  • See your internet-banking password

Staying in control

  • Disconnect any time from your Akahu account. Transactions already imported stay in OurJamJar until you delete them.
  • Ask for your data — or ask us to correct it — and we’ll respond as the Privacy Act requires.
  • Delete your account and we’ll delete your data, apart from anything we’re legally required to keep. TODO: confirm deletion process and timeframe.
  • Not the product. We don’t sell your data or use it for advertising.

Where your data lives and how it’s protected

  • Hosting: OurJamJar runs on Cloudflare. Our database is currently located in Cloudflare’s Oceania region. TODO: confirm the exact country (New Zealand or Australia) and whether a data-location guarantee applies before stating it here.
  • Encryption: all connections to OurJamJar use HTTPS (encrypted in transit), and our hosting provider encrypts stored data at rest.
  • Access: only signed-in members of your household can see your budget. TODO: describe sign-in protections (e.g. one-time codes) and staff access policy.
  • Bank data from Akahu is also handled under Akahu’s own security and privacy terms.

Privacy Act 2020

We’re a New Zealand business, and we handle personal information under the Privacy Act 2020. In practice that means:

  • We only collect what we need to run OurJamJar, and we tell you why.
  • You can ask to see the personal information we hold about you, and ask us to correct it.
  • We keep it secure and don’t keep it longer than we need to.
  • If a privacy breach is likely to cause serious harm, we’ll tell you and the Privacy Commissioner.
  • If information is stored or processed outside New Zealand, we make sure it’s protected to a comparable standard.

Read the full privacy policy, or email [email protected] with a privacy question or to report a security concern.

Questions about your data?

We’re happy to explain anything here in more detail.