Your money stays put. Your data stays yours.

How bank feeds work

Import a CSV from your bank today. Live, read-only bank feeds are switching on for all households shortly. When a feed is on, Jarful doesn’t connect to your bank directly. We use Akahu, a New Zealand open-finance provider that many local money apps use to receive bank data.

When a feed is switched on:

1. You’ll start the connection from Jarful, which hands you over to Akahu’s secure screens.
2. You’ll sign in and choose what to share — which bank, and which accounts. Your banking login goes to Akahu or your bank, never to Jarful.
3. You’ll approve read-only access. Akahu then sends us transactions and balances for the accounts you picked.
4. You can take it back. Revoke access at any time from your Akahu account and the feed stops.

You can keep importing CSV statements from internet banking instead of connecting.

What Jarful can and can’t do

Staying in control

• Disconnect any time from your Akahu account, once a feed is on. Transactions already imported stay in Jarful until you delete them.
• Ask for your data — or ask us to correct it — and we’ll respond as the Privacy Act requires.
• Delete your account and we’ll delete your data, apart from anything we’re legally required to keep. TODO: confirm deletion process and timeframe.
• Not the product. We don’t sell your data or use it for advertising.

AI features

A few optional features use AI to save you typing: reading a receipt you snap, an insurance policy you upload, photos of your belongings and their labels, and Ask Jarful (off until you switch it on in Settings).

• Only the image, document or question you’re working on — plus the figures needed to answer it — is sent to Anthropic, the company behind Claude, to be read.
• Ask Jarful never sees account numbers, and answers link back to the figures they came from.
• You check a policy’s details before they’re saved, AI only fills in fields you’ve left empty on belongings, and a matched receipt can be undone. Replacement values are shown as estimates.
• Receipt, belongings and policy files are stored privately with your account.

Where your data lives and how it’s protected

• Hosting: Jarful runs on Cloudflare. Our database is currently located in Cloudflare’s Oceania region. TODO: confirm the exact country (New Zealand or Australia) and whether a data-location guarantee applies before stating it here.
• Encryption: all connections to Jarful use HTTPS (encrypted in transit), and our hosting provider encrypts stored data at rest.
• Access: only signed-in members of your household can see your budget. TODO: describe sign-in protections (e.g. one-time codes) and staff access policy.
• Bank data from Akahu is also handled under Akahu’s own security and privacy terms.

Privacy Act 2020

We’re a New Zealand business, and we handle personal information under the Privacy Act 2020. In practice that means:

• We only collect what we need to run Jarful, and we tell you why.
• You can ask to see the personal information we hold about you, and ask us to correct it.
• We keep it secure and don’t keep it longer than we need to.
• If a privacy breach is likely to cause serious harm, we’ll tell you and the Privacy Commissioner.
• If information is stored or processed outside New Zealand, we make sure it’s protected to a comparable standard.

Read the full privacy policy, or email support@getjamjar.com with a privacy question or to report a security concern.