How Fireball uses your bank data

When Connected AI is available, eligible paid users can expressly authorize a compatible AI service to read personal accounts, transactions, the transaction rules you saved, the alerts you set up, your next payday, your Weekly Review, your watchlist, and saved budget, goals, net worth, FIRE, debt and financial insight summaries. The service can also ask Fireball to work out figures for a period you name, or a FIRE or debt what if, which Fireball works out from your saved information with its own calculations, on its servers or in your Fireball app while it is open. Where suggestions are available, the service can suggest a change such as a rule, a category, a tag, a budget, a goal or an alert, and nothing changes unless you review and save it in Fireball. This consent is separate from Fireball AI settings. Client names are unverified. Your chosen service receives data under its own terms, including its processing locations and retention. Access excludes collaborator data, attachments, private notes, bank credentials and account numbers. Connections survive ordinary sign out, expire after 90 days without a financial read and can be disconnected individually or together. Disconnection stops future access but cannot recall previously shared data. MCP cannot refresh banks or change records. Fireball holds a request and its answer for up to 15 minutes and a suggestion for up to 30 days, or 7 days after you save or dismiss it. It keeps a record of whether its servers and your app worked an answer out the same way, without any figures, for 30 days. Fireball retains sanitized connection access events for 30 days without tokens, financial payloads or search text.

When you tap “Connect with Akahu”, Akahu will ask you to:

1. Pick your bank.
2. Sign in to your online banking through Akahu's secure hosted screen.
3. Approve Fireball's request to access your accounts.

Fireball never sees your online banking password.Your credentials go directly to your bank via Akahu's secure connection, and we only receive the data you authorise. Fireball sends Akahu an email address as a login hint: on reconnect we first try to use the current email on your Akahu profile; for a first connection, or if that lookup is unavailable, we use your Fireball account email. Fireball does not retain the hint in its short-lived connection session. Your Akahu user access token stays on Fireball's server and is never sent to or stored by the mobile app.

With your authorisation, we'll read the following from each connected account:

We do not request, and Akahu does not provide, any payment-initiation capability. Fireball is read only. We cannot move money in or out of your accounts.

• Initial connection: we fetch the most recent 3 months of transactions immediately so you can start using the app, then backfill up to the previous 12 months in the background.
• Ongoing: we receive updates continuously via Akahu's secure webhooks, typically within minutes of a new transaction appearing in your bank, until you disconnect or your Fireball subscription ends.

This is ongoing access, not a one-off snapshot.

• We will not sell, rent, or share your bank or transaction data with advertisers, data brokers, or any third party for marketing purposes.
• We will not use your data to provide services to other businesses (no “aggregator” services).
• We will not share your data outside the providers listed in our Privacy Policy. We share data with another person only after you explicitly invite them as a collaborator.

On the Paid plan you can invite up to four people you trust as a Viewer or an Editor. Each person uses their own verified Fireball login and can see your accounts, balances and transactions from connected banks through Fireball. An Editor can also change ordinary Fireball records. Nobody you invite can connect, reconnect, refresh or disconnect a bank, run imports, or see bank connection details, and inviting someone never lets them move money.

Every shared edit needs a live access check. After a successful check, Fireball can keep a sanitised read-only copy of previously downloaded shared financial data on that person's device for up to 24 hours; shared attachments, media, bank credentials, provider tokens and connection details are excluded from that copy. You can remove a person's access at any time from Settings, and they can leave at any time.

You can revoke access at any time:

• In Fireball: Settings → Bank Connections → Disconnect all banks.
• Through Akahu: use Manage accounts through Akahu for an official open-banking connection, or sign in at my.akahu.nz to revoke a classic connection.

When you disconnect:

• Fireball asks Akahu to revoke access and shows the connection as disconnected only after Akahu confirms it. If Akahu cannot confirm revocation, the connection stays active so you can retry.
• After confirmation, Fireball stops receiving new data from Akahu.
• You can delete a disconnected account's saved transaction history from Fireball, or keep it for offline reference. A live or needs-attention account must be disconnected first.
• Your last-known account balances are kept as a frozen snapshot so your historical net worth charts stay intact (you can delete those too if you prefer).

When your Fireball subscription ends:

• Live bank refresh pauses while Fireball's revocation process settles with Akahu.
• Your saved Fireball history and last-known balances are preserved unless you choose to delete them.
• If Akahu access is still active, you can view your cached bank summary and disconnect without resubscribing. Adding or reconnecting banks, refreshing data, or changing provider access requires an active subscription.

You can delete your Fireball account from Settings → Delete Account. Fireball first asks Akahu to revoke every connection token. If Akahu cannot confirm revocation, deletion stops so you can retry; after confirmation, Fireball erases your account data as described in our Privacy Policy.

Akahu is New Zealand's open finance platform. We use Akahu to securely connect to your bank and fetch the transaction and balance data described above.

Fireball is accredited by Akahu. Akahu reviewed Fireball before approving it to connect customer accounts. Akahu is an independent New Zealand company accredited by MBIE to provide open banking services. When you connect through Akahu:

• Akahu acts as a separate data processor under its own privacy notice.
• Your online banking credentials go to Akahu (and onward to your bank), never to Fireball.
• Akahu manages the technical relationship with your bank and gives you a dashboard to control which apps have access to your data.

Learn more about Akahu:

• akahu.nz
• Akahu Privacy Notice
• Akahu End User Terms
• Manage your Akahu connections at my.akahu.nz

• Privacy enquiries: support@heliosstudio.app
• General support: fireball.finance/support