How we protect your data.
Your finances are sensitive. This page says plainly what we do, and what we do not claim.
What we do
Hosted in the EU
Application servers and databases are located in the European Union.
Encryption at rest
Full-disk encryption protects our servers. Secrets such as bank-connection tokens and second-factor secrets get an extra layer of field-level encryption.
Strong sign-in
Passwords are stored only as Argon2 hashes. A second step is required: an authenticator code, an email code or a passkey.
Banks stay with banks
When you connect a bank, sign-in happens at your bank through an EU open-banking provider. We never see or store your online-banking password.
AI that stays home
Jeli runs on our own servers. Your questions and figures are not sent to an outside AI provider.
No data selling
We do not sell your personal data, and we do not use it for advertising.
Encrypted backups
Backups are encrypted before they leave our servers.
You choose what to connect
Nothing is linked unless you link it, and you can disconnect or delete data later.
What we do not claim
- No system is perfectly secure, and we do not promise that it is.
- We do not currently claim any third-party security certification.
- Some market data and bank data come from third parties whose practices we do not control.
Report a vulnerability
If you believe you have found a security issue, email [email protected] with the details. We will acknowledge your report and keep you informed. Please do not access other people’s data while testing.
More detail
See the privacy notice, the AI disclosure and the cookie notice.