Linking a bank account to an app feels risky, and it is reasonable to be careful. The answer to "is it safe?" is not a plain yes or no. It depends on how the connection is made and what the app does with your data. This guide explains how bank connections typically work and gives you a checklist you can apply to any budgeting app, including ours.
How most budgeting apps connect to your bank
Few apps connect to banks directly. Most use a data-connection provider such as Plaid. The flow is usually:
- The app opens the provider's window, often called a "link" screen.
- You choose your bank and sign in inside that window, with your bank's own login steps, including any verification code.
- The provider receives permission to share certain data with the app, for example account details and transactions.
- The app receives an access token, not your bank password. The token represents the permission you granted.
The key point: with a well-designed connection, your online banking password is typed into the provider's window and never reaches the budgeting app.
What the app can and cannot do
The permission is scoped to the kinds of data the app asks for. A budgeting app that requests transactions can read your transaction history and account details. That is different from permission to move money. Read what the app asks for, because the scope varies.
Ask whether the app can:
- Initiate payments or transfers. Most budgeting apps should not.
- Read only the accounts you pick.
- Be disconnected easily, and what happens to the stored token and the imported data when you disconnect.
A checklist before you link anything
- Who sees my bank login? It should be the provider's window or your bank, not a form on the app's own page.
- What data is requested? Transactions only is narrower than everything.
- Does the app have its own password? Fewer passwords means fewer things to leak. Signing in with a large identity provider that supports verification codes can be safer than a new password.
- How are tokens stored? Look for a statement about encryption.
- Can I disconnect and delete? There should be a clear way to remove the connection and a way to ask for your data to be deleted.
- How does the business make money? If an app is free, find out why. Selling or sharing your data is the answer you want to rule out.
- Is there a plain-language privacy policy? If it is vague about who receives your data, treat that as a warning.
Reduce the risk further
- Use a strong, unique password and two-step verification on your bank and on the account you use to sign in to the app.
- Link only the accounts you need.
- Review connected apps from time to time. Many banks list third-party connections in their security or privacy settings, and you can remove ones you no longer use.
- Prefer an import if you are not comfortable linking. A CSV or PDF statement involves no live connection at all. See how to import a bank statement.
How KHMYS handles it
We would rather show our work than ask for trust, so here is what is documented on our Privacy and Security pages:
- Sign-in is through Google only. KHMYS stores no passwords.
- Bank connections go through Plaid. You enter your bank login in Plaid's window, never in KHMYS. KHMYS requests Plaid's transactions product for US institutions.
- Tokens are encrypted. Access tokens for connected providers such as Plaid are stored encrypted in the database. That statement covers those tokens specifically, not every item of data.
- Disconnecting removes the connection. KHMYS asks Plaid to remove it and deletes the stored connection and access token. Transactions already imported stay in your account until you ask for deletion.
- No advertising or tracking cookies, and nothing sold. Cloudflare Web Analytics, which does not use cookies, counts page views in aggregate.
- KHMYS does not move money.
- It is free today. KHMYS does not charge anything now.
KHMYS also works without a bank link: you can import statements or add transactions by hand. Self-service account deletion is not available yet, so to delete your account and data, email [email protected].
No tool is risk-free, and you should make the decision with the checklist above. If you want to look around first, the demo needs no account and no bank.