Security & privacy

Your money stays put. Your data stays yours.

A plain-English guide to how JamJar connects to your bank, what it can and can’t do, and how we look after your information.

How bank feeds will work Coming soon

Live bank feeds are coming soon — today you bring transactions in by importing CSV statements from internet banking. When feeds arrive, JamJar won’t connect to your bank directly. We use Akahu, a New Zealand open-finance provider that many local money apps use to receive bank data.

  1. You’ll start the connection from JamJar, which hands you over to Akahu’s secure screens.
  2. You’ll sign in and choose what to share — which bank, and which accounts. Your banking login goes to Akahu or your bank, never to JamJar.
  3. You’ll approve read-only access. Akahu then sends us transactions and balances for the accounts you picked.
  4. You can take it back. Revoke access at any time from your Akahu account and the feed stops.

Prefer not to connect at all? You can upload CSV statements exported from internet banking instead.

What JamJar can and can’t do

It can

  • Read transactions and balances for the accounts you choose (once bank feeds are live)
  • Categorise them and build your budget, reports and projections
  • Show the same household budget to people you invite

It can’t

  • Move money, make payments or transfers
  • Change anything in your bank accounts
  • See your internet-banking password

Staying in control

  • Disconnect any time from your Akahu account, once bank feeds are live. Transactions already imported stay in JamJar until you delete them.
  • Ask for your data — or ask us to correct it — and we’ll respond as the Privacy Act requires.
  • Delete your account and we’ll delete your data, apart from anything we’re legally required to keep. TODO: confirm deletion process and timeframe.
  • Not the product. We don’t sell your data or use it for advertising.

AI features

A few optional features use AI to save you typing: reading a receipt you snap, an insurance policy you upload, photos of your belongings and their labels, and Ask JamJar (off until you switch it on in Settings).

  • Only the image, document or question you’re working on — plus the figures needed to answer it — is sent to Anthropic, the company behind Claude, to be read.
  • Ask JamJar never sees account numbers, and answers link back to the figures they came from.
  • You check a policy’s details before they’re saved, AI only fills in fields you’ve left empty on belongings, and a matched receipt can be undone. Replacement values are shown as estimates.
  • Receipt, belongings and policy files are stored privately with your account.

Where your data lives and how it’s protected

  • Hosting: JamJar runs on Cloudflare. Our database is currently located in Cloudflare’s Oceania region. TODO: confirm the exact country (New Zealand or Australia) and whether a data-location guarantee applies before stating it here.
  • Encryption: all connections to JamJar use HTTPS (encrypted in transit), and our hosting provider encrypts stored data at rest.
  • Access: only signed-in members of your household can see your budget. TODO: describe sign-in protections (e.g. one-time codes) and staff access policy.
  • Bank data from Akahu is also handled under Akahu’s own security and privacy terms.

Privacy Act 2020

We’re a New Zealand business, and we handle personal information under the Privacy Act 2020. In practice that means:

  • We only collect what we need to run JamJar, and we tell you why.
  • You can ask to see the personal information we hold about you, and ask us to correct it.
  • We keep it secure and don’t keep it longer than we need to.
  • If a privacy breach is likely to cause serious harm, we’ll tell you and the Privacy Commissioner.
  • If information is stored or processed outside New Zealand, we make sure it’s protected to a comparable standard.

Read the full privacy policy, or email hello@ourjamjar.com with a privacy question or to report a security concern.

Questions about your data?

We’re happy to explain anything here in more detail.