How we keep your data safe
Your money is personal. Here's exactly what we keep, what we don't, and what you can do about it, in plain words.
- We never ask for your bank login
You upload the statement your bank already gives you, or forward your bank's alerts. We can't move money and we never see your bank password. If you later choose the bank link, you sign in on Stitch's secure screen, not ours, and it can only read.
- Only the last 4 digits of your card
Enough to tell your cards apart. Never the full card number, expiry date or CVV. We do keep the payments you bring in (amount, shop and date), because that's what builds your budget and tax pack. The statement file itself isn't kept.
- Your ID number is encrypted
It's locked before it's saved, and only its last 4 digits are ever shown on screen.
- Personal payments stay personal
If you share your records with an accountant or a team, they see business payments only. Never your personal spending.
- We don't sell your data
Your payments are used to build your own tax records and budget. Nothing is sold, and nothing is shared unless you ask us to.
- Partners only when you ask
Your details go to a partner (like a tax practitioner) only when you tap Call me back or WhatsApp me, and only what that needs.
- Delete your account any time
Account and privacy has a delete button. It stops any debit order and removes your payments, slips, files and details, for good. The only thing we keep is the record of what you paid us, with your name taken off, because the law says we must keep our books.
- Locked in transit and at rest
Everything travels over HTTPS and is stored encrypted by our database provider, with row-level security so each person can only reach their own records.
The law we follow
OneFile Money is run by Advisor-Link Digital (Pty) Ltd and follows the Protection of Personal Information Act (POPIA). You can ask what we hold about you, correct it, or have it deleted. The full details are in our privacy notice.