Skip to main content

How we protect your money data

Last reviewed: 2 October 2026

You are trusting Fireball with a picture of your finances. This page explains, in plain words, what we do to keep it safe.

We never see your bank password

You connect your bank through Akahu, a New Zealand open banking provider accredited by the Ministry of Business, Innovation and Employment. You sign in with your bank on their side, and Fireball only receives the account and transaction information you agree to share.

Fireball cannot move your money

The bank connection is read only. Fireball can show your accounts and transactions, but it cannot make payments, transfer funds, or move money in or out of your accounts.

Your data is encrypted

Everything travels over encrypted connections and is stored encrypted on our servers. The copy kept on your phone is encrypted too, and the access your bank grants us is held in a separate secrets vault.

Every sign in is verified

A password alone is not enough. You confirm each sign in with an emailed code or your authenticator app.

You decide what AI sees

AI features stay off until you turn them on, and you can turn them off again at any time.

You can leave whenever you like

Disconnect your bank or delete your account in Settings. Deleting your account removes your financial data. We keep only the limited records we need to prevent abuse and meet our legal obligations.

For the full detail, read how we use your bank data and our Privacy Policy. Found a security problem? Tell us through Support.