Security and your data

Veowe is a tracker, not a payment tool. Manual tracking is the default: it reads nothing from your bank unless you explicitly connect one, and it writes nothing to it ever. By default the numbers it works with are the numbers you type: a balance, an APR, a payment you made, a goal you are saving towards.

That is a deliberate design choice rather than a missing feature. A visual tracker does not need transaction-level access to draw your progress accurately, and access you never granted cannot be misused or leaked. If you do choose to connect a supported current account, the optional connected mode can read balances and transactions after you confirm consent with your own bank — and it stays read-only, so Veowe still never writes to your account or moves money.

No bank connection is needed — Veowe is manual-first, and you enter balances and payments yourself. If you want it, an optional read-only current-account connection is available on a paid plan through a regulated open-banking provider, and you can disconnect it at any time. Read-only means Veowe can see balances and transactions but can never initiate, redirect or cancel a payment. Veowe never moves money or changes a real payment.

In practice this means you can use Veowe entirely by hand, and nothing is connected unless you start the connection yourself and confirm consent with your own bank. Access tokens are held encrypted on the server, are never sent to your browser, and are deleted when you disconnect. Nothing about a connection changes Veowe’s inability to move money.

You can use Veowe on a single device, or create an account so your debts, savings and check-ins are kept in your Veowe account and available across devices. You can export or delete your account data from your settings at any time.

Records belong to the account that created them. The app requests only your own rows, and the database enforces that ownership on its own side as well, so a request for someone else’s data does not depend on the interface behaving correctly in order to fail.

Payments and card details are never held by Veowe. Checkout is handled by Stripe, and card numbers do not pass through Veowe’s own storage.

Your account settings include an export of your data and a deletion path. Deletion removes your projects, payments and check-ins along with the account itself; it is not a hidden deactivation that keeps the data around.

Being able to leave cleanly is part of the product, because a tracker you cannot walk away from is not a calm place to keep your money data.

Veowe is an independent product built by a small team. This page does not claim a security certification, an external audit result, or regulatory authorisation, and you should be suspicious of any money app that claims those without naming who issued them.

Veowe also does not provide regulated financial, debt or investment advice. It shows you your own numbers; decisions remain yours, and free regulated debt advice is available elsewhere if you need it.

If you find a security issue, please get in touch through the contact page with enough detail to reproduce it, and give us a chance to fix it before sharing it publicly. Reports about your own account data are welcome too — if something looks wrong, we would rather hear it early.