Your money data, handled carefully

We built Worthberry the way we'd want our own finances looked after. Here's exactly how.

Read-only bank access

When you link a bank, you sign in through Akahu (or your bank's own screen) and choose which accounts to share. Your bank password never reaches Worthberry.

In New Zealand, that's through Akahu, an open finance platform for New Zealand.

Worthberry only asks to read. Nothing in Worthberry can make a payment or move money. Banks ask you to renew consent from time to time, and you can disconnect at any time, from Worthberry or from Akahu.

Encrypted and stored in Australia

  • Everything travels over encrypted connections (HTTPS).
  • Your data is stored in Sydney, Australia, on encrypted disks.
  • The keys that let us read your accounts are encrypted again on their own.
  • Passwords are stored only as one-way hashes, so even we can't see them.
  • Daily backups, kept for 30 days.

Protecting your sign-in

  • Two-step sign-in with an authenticator app, plus recovery codes.
  • A list of every device you're signed in on, and a button to sign them all out.
  • An activity log of sign-ins, bank connections and exports.
  • Repeated wrong passwords slow down, then need a link we email you.
  • We email you when your password or two-step settings change.

You stay in control

  • Export everything you've put into Worthberry, whenever you like.
  • Delete your account and your data is removed straight away. Backup copies are gone within 30 days.
  • When you disconnect a bank, you choose whether to keep or delete its history.

What we'll never do

  • Sell your data, use it to choose ads, or share it with advertisers.
  • Use it to make lending or credit decisions about you.
  • Send your balances or transactions to analytics tools.

Information, not advice

Worthberry shows clear numbers about your money. It doesn't recommend products or tell you what to buy or sell, and it isn't financial advice. For that, talk to a licensed financial adviser.

Read the full privacy policy, terms of use and our list of service providers.

Found a security issue?

Tell us at security@worthberry.co. We reply within 2 working days and won't take action against good-faith research that follows our acceptable use policy.