Security
Bica handles financial data, so the honest question isn’t “is it secure” — every app says yes — but “what can it actually do with my account, and what happens to my data”.
Bica cannot move your money
Connections are made through regulated Open Banking (PSD2). The access Bica requests is read-only: balances and transaction history, nothing else.
This is a structural limit, not a promise. Payment initiation is a separate permission under PSD2, requiring separate authorisation, and Bica does not hold it. Even if someone gained full control of Bica, the access there would not include the ability to move a euro out of your account.
Bica never sees your bank login
You authenticate on your bank’s own screens. Your credentials go to your bank and nowhere else — they are never entered into Bica, never transmitted through it, and never stored by it.
What Bica holds is a consent token: permission your bank granted to read specific accounts, which your bank can revoke and which expires on its own schedule. You can also disconnect any account from Bica at any time.
Encryption
Everything in transit uses 256-bit TLS. Sensitive data, including anything tied to your bank connections, is encrypted at rest before it’s stored.
Your data isn’t the product
Bica doesn’t sell, share, or monetize your personal or financial data. There is no advertising business, no data brokerage, no third party being handed your transactions.
Worth being direct about why: Bica charges a subscription. That’s the whole business model. When a finance app is free, your spending history is generally what’s being sold — and a transaction list is an unusually detailed record of a person’s life. Paying for the tool is what keeps that off the table.
Deleting your account
You can delete your account at any time from settings. Deletion is permanent and complete: your transactions, bank connections, categories, rules and account information are removed. Not deactivated, not retained for a rainy day.
If you’d rather just cut off access without deleting anything, disconnecting an account stops future syncing and leaves your existing data in place.
Things worth doing on your side
Bica’s security only goes as far as your account:
- Use a unique password. Reused passwords are the most common way accounts anywhere are compromised.
- Keep your email secure. Password resets go there, which makes it the key to everything else.
- Disconnect accounts you no longer track. Access you don’t use is access you don’t need.
The legal detail
For the full terms, see the Privacy Policy and Terms of Service. This page is a plain-language summary; those documents govern.