Two charges of $62.98 a month have run for eleven months, with no other transaction at either merchant.
Security · read-only
The most important part, in black and white.
Your bank connections are read-only. No transfer is technically possible from Yoseri — not because we refrain, but because the authorisation requested does not allow it.
No banking credentials kept
Free without connecting any account
Your bankrevocable token
Yoseriread-only
The bank authorisation requested is read-only: writing is impossible in either direction. No transfer, no payment, no purchase.
Yoseri is not open yet outside Canada.
This page describes the product as it works in Canada. The pension plans, the tax shelters and the connected banks here are Canadian: they do not transpose. Where you are, it would rather be the local public plan, with the local tax shelters as tax shelters and your tax administration opposite.
We do not claim to know those rules today — connecting them is work, not a translation. Tell us where you are: the order in which markets open is decided there.
Yoseri is not open outside Canada yet.
This page describes the product as it works in Canada. The retirement plans, the tax shelters and the connected banks are Canadian: they do not carry over. Where you live, it would rather be the local public plan, with the local tax shelters as tax shelters and your own tax authority on the other side.
We do not claim to know those rules today — wiring them in takes work, not a translation. Tell us where you are: the order in which markets open is decided there.
The authorisation screen
Nothing that follows will be a surprise.
It is the longest screen in the sign-up flow, and that is deliberate. It comes at step 3 of 4, before any connection, and it fits on a single screen you are asked to read in full.
Yoseri will be able to
Read your balances and transactionsIncluding up to 24 months of history, so the comparisons work from day one.
Read the name and type of your accountsTo tell them apart and apply the right tax rules — a TFSA is not treated like a chequing account.
Refresh that data four times a dayFor as long as you have not revoked access. Revoking cuts the refresh that very instant.
Yoseri will not be able to
Move moneyNo transfer, no payment, no purchase. The authorisation requested does not technically allow it.
See or store your credentialsYou type them at your institution, in its window. Yoseri receives an access token, never your password.
Change anything at your bankNo write is possible in any direction — not even changing an account’s nickname.
Sell or share your dataNot to an advertiser, not to a data broker, not to an institution.
Your credentials
A revocable token comes from your bank. Your password stays with it.
When you connect Desjardins, you are redirected to Desjardins. Yoseri sees nothing of that step and takes over once the authorisation is granted, with a read access token.
The token can be revoked on your side, immediately, in two taps
It can also be revoked at your bank, without asking us
You can refuse the connection and type everything yourself — free, for life
Day-to-day protection
Yoseri advises against text messages. It offers them anyway.
The authenticator app is the recommended method: it works offline. The physical security key — YubiKey, Titan — is the safest.
Temporary lockout after a run of failed attempts
Changing your password signs out all your active sessions
A confirmation email goes out on every security change
Your data
The export is complete, readable, and needs no Yoseri tool.
An export that only opens where it was produced is not an export: it is a screenshot. Yours is 6 files and 2,461 rows, in CSV, JSON or PDF, and opens in any spreadsheet.
The limits, owned up to
Yoseri sees the charge, never the use.
The list of what an app cannot know is worth as much as the list of what it knows. A tool that claimed “you do not use this” would be inventing data it does not have, even when the inference looks obvious.
It sees the $100 withdrawal. What you do with it, no.
One $100 ATM withdrawal this month, plus $6 in fees. Yoseri stops there.
A discrepancy is named and dated, never smoothed over in silence
No category is guessed from a round amount
Allocating your cash is the only way the budget stays honest
When it breaks
A stale figure is shown as stale.
Bank connections go down — an institution changes its authentication mechanism, a password is changed, a service has an outage. What matters then is that nothing is presented as current without being so.
An account that stops answering is marked “stale”, never shown as current
Reconnecting picks up where the sync stopped — nothing is lost
Straight questions
What people ask us before connecting an account.
Short answers, including when they are disappointing.
And if you get hacked?+
Let us start with what is not at stake: Yoseri holds no banking credentials, no verification code, and no token capable of moving a dollar — the scope requested excludes any write, in either direction.
And if Yoseri shuts down?+
You leave with everything, and you can do it today to check that it is true. The full export — 6 files, 2,461 rows, 1.2 MB — opens in any spreadsheet as CSV, in any editor as JSON, or reads as it is in PDF.
Why should I believe you?+
You should not, on our word. First, the check with a third party: your own bank’s consent window shows the scope requested before you accept — read it, it does not come from us.
What does a Yoseri employee see?+
When you write to support, the team sees your messages and the state of your connections — for example that a National Bank card has not synced since 12 August at 10:10 p.m. It sees neither the detail of your transactions nor your balances.
Can I use Yoseri without connecting any account?+
Yes, entirely, and free for life. You can even explore the app without creating an account: the four answers of the walkthrough stay on your device, and if you leave, nothing is left of them.
I lose my phone tonight. What do I do?+
You sign in from a browser, with your verified email and one of your backup codes — that is exactly what they are for, and it is why verifying your email is not a formality at sign-up.
Read it all, then decide.
The demo asks for no credentials, and the bank connections stay with the licensed provider.
Encryption at rest and in transit. Full export and deletion at any time.