# Security

> How Bica protects your bank connections and financial data — what it can access, what it stores, and what it can never do.

Source: https://trybica.com/docs/security/
Updated: 2026-08-13

---

Bica handles financial data, so the honest question isn't "is it secure" — every app says yes — but "what can it actually do with my account, and what happens to my data".

## Bica cannot move your money

Connections are made through regulated Open Banking (PSD2). The access Bica requests is read-only: balances and transaction history, nothing else.

This is a structural limit, not a promise. Payment initiation is a separate permission under PSD2, requiring separate authorisation, and Bica does not hold it. Even if someone gained full control of Bica, the access there would not include the ability to move a euro out of your account.

## Bica never sees your bank login

You authenticate on your bank's own screens. Your credentials go to your bank and nowhere else — they are never entered into Bica, never transmitted through it, and never stored by it.

What Bica holds is a consent token: permission your bank granted to read specific accounts, which your bank can revoke and which expires on its own schedule. You can also disconnect any account from Bica at any time.

## Encryption

Everything in transit uses 256-bit TLS. Sensitive data, including anything tied to your bank connections, is encrypted at rest before it's stored.

## Your data isn't the product

Bica doesn't sell, share, or monetize your personal or financial data. There is no advertising business, no data brokerage, no third party being handed your transactions.

Worth being direct about why: Bica charges a subscription. That's the whole business model. When a finance app is free, your spending history is generally what's being sold — and a transaction list is an unusually detailed record of a person's life. Paying for the tool is what keeps that off the table.

## Deleting your account

You can delete your account at any time from settings. Deletion is permanent and complete: your transactions, bank connections, categories, rules and account information are removed. Not deactivated, not retained for a rainy day.

If you'd rather just cut off access without deleting anything, disconnecting an account stops future syncing and leaves your existing data in place.

## Things worth doing on your side

Bica's security only goes as far as your account:

- **Use a unique password.** Reused passwords are the most common way accounts anywhere are compromised.
- **Keep your email secure.** Password resets go there, which makes it the key to everything else.
- **Disconnect accounts you no longer track.** Access you don't use is access you don't need.

## The legal detail

For the full terms, see the [Privacy Policy](/privacy/) and [Terms of Service](/terms/). This page is a plain-language summary; those documents govern.

## Related

- [Bank sync](/docs/bank-sync/) — how connections are made and maintained
- [Autopilot](/docs/autopilot/) — what Bica does automatically, and what it never does