Tjommie

How we protect you

Your bank statement is personal. Here’s exactly what we do with it, in plain language.

✓ We never see your bank loginYou download a statement from your banking app and upload it. Tjommie never asks for your banking password, PIN or app login, so there is nothing for anyone to steal from us that opens your account.
✓ We can’t move your moneyTjommie is read-only. It has no way to make payments, change debit orders or touch your account. Any change is something you do yourself, with your bank.
✓ Your PDF is deleted straight after readingThe statement is read in memory, the transactions are saved to your account, and the PDF itself is never stored.
✓ Account and ID numbers are maskedAny long number, like an account, card or ID number, is cut to its last 4 digits (••6345) before it is saved. The database enforces this on everything, not just the app.
✓ Only you can see your dataEvery row in our database is locked to your account. Even a mistake in our app can’t show your data to someone else.
✓ You decide how long we keep itStatements are deleted automatically after 3, 6 or 13 months, your choice in Settings. One tap deletes your whole account and everything in it.

The details

Sign-in

Passwords must be at least 10 characters with letters and numbers. You can turn on two-step sign-in with an authenticator app, and then nobody gets in without the code on your phone. We sign you out after 30 minutes without activity, like your banking app does.

Encryption

Everything travels over an encrypted connection (HTTPS). Our database is encrypted on disk by our hosting provider.

Reading statements

Statements are read by Anthropic’s Claude through its business API. Anthropic doesn’t use this to train its models, and deletes it within 30 days unless it’s flagged for misuse or the law requires otherwise.

Where your data lives

Your data is stored in London, United Kingdom, and our app servers run there too. See the privacy policy for every company that helps us and why.

Limits

Each account has daily limits on uploads and questions, which stops anyone abusing the service.

Not financial advice

Tjommie gives you information about your own money. Investment advice only ever comes from a licensed financial services provider, and only if you ask.

If something goes wrong

If we ever discover that your information was accessed without permission, we will tell you and the Information Regulator as soon as we reasonably can, as the Protection of Personal Information Act (POPIA) requires, and explain what happened and what we are doing about it.

Spotted a security problem? Email morne@basilei.com. We take every report seriously.

Read the full privacy policy for what we collect, why, and your rights.