The most important part, in black and white.
Your three bank connections are read-only. No transfer is technically possible from Yoseri — not because we refrain, but because the authorisation requested does not allow it.
Yoseri is not open yet outside Canada.
This page describes the product as it works in Canada. The pension plans, the tax shelters and the connected banks here are Canadian: they do not transpose. Where you are, it would rather be the local public plan, with the local tax shelters as tax shelters and your tax administration opposite.
We do not claim to know those rules today — connecting them is work, not a translation. Tell us where you are: the order in which markets open is decided there.
Status on August 30, 2026 — Yoseri is not open yet. This page describes the design commitments of a product under construction, not a system in service and audited. The figures shown are on a worked example. No external verification has taken place yet — when it does, its summary will be published here, with its date.
Nothing that follows will be a surprise.
It is the longest screen in the sign-up flow, and that is deliberate. It comes at step 3 of 4, before any connection, and it fits on a single screen you are asked to read in full.
- Read your balances and transactionsIncluding up to 24 months of history, so the comparisons work from day one.
- Read the name and type of your accountsTo tell them apart and apply the right tax rules — a TFSA is not treated like a chequing account.
- Refresh that data four times a dayFor as long as you have not revoked access. Revoking cuts the refresh that very instant.
- Move moneyNo transfer, no payment, no purchase. The authorisation requested does not technically allow it.
- See or store your credentialsYou type them at your institution, in its window. Yoseri receives an access token, never your password.
- Change anything at your bankNo write is possible in either direction — not even changing an account’s nickname.
- Sell or share your dataNot to an advertiser, not to a data broker, not to an institution.
| Before you continue | Commitment shown on screen |
|---|---|
| Length of the authorisation | Until revoked |
| Revocation | Immediate, in two taps |
| Erasure after revocation | Within 30 days |
| Export of your data | Always available — CSV, JSON, PDF |
| Encryption at rest and in transit | AES-256 and TLS 1.3 |
| Hosting | Canada |
| Banking credentials kept | None |
| Data sold on | None |
HISTORY READ
24 months1,842 transactions in the worked exampleREFRESHES
4 a dayuntil revoked, no furtherINSTITUTIONS
38banks, credit unions, cards and brokersWRITES POSSIBLE
0in either direction24 months back, four reads a day. Nothing else.
The scope requested is bounded in both directions. Backwards: 24 months of history, or 1,842 transactions in the example shown here — that is what lets you compare a quarter with last year’s from your first day.
- You can use the app without waiting for the import to finish
- 11 recurring subscriptions and 4 income sources spotted during the import
- 218 distinct merchants identified, without a single name leaving your account
Import under way
1,442 of 1,842Yoseri fetches and sorts your history. That is what makes comparisons possible from day one.
IMPORTED
1 442SORTED
1 356TO REVIEW
86By period
DoneBy period
DoneBy period
Under wayBy period
WaitingAlready spotted during the import: 11 recurring subscriptions, 4 income sources, 218 distinct merchants.
Yoseri does not sit in on your bank login.
Your credentials are typed at your institution, in its own window. Yoseri never sees them and cannot store them: that is not an internal rule, it is a consequence of the path the authentication takes.
A revocable token comes from your bank. Your password stays with it.
When you connect Desjardins, you are redirected to Desjardins. Yoseri sees nothing of that step and takes over once the authorisation is granted, with a read access token.
- The token can be revoked on your side, immediately, in two taps
- It can also be revoked at your bank, without asking us
- You can refuse the connection and type everything yourself — free, for life
What travels, exactly
One wayTyped on your institution’s domain
NeverSent by your bank, to your bank
NeverRevocable, bounded to the scope accepted
ReceivedRefreshed four times a day
ReadIf the authentication fails, Yoseri tells you why and what was transmitted. In that case the answer is “None”.
A stolen password is no longer enough to get into your account.
Two-step verification is offered from sign-up and adjustable afterwards. Three methods exist, and Yoseri says which one it advises against — even though it stays on offer.
Yoseri advises against text messages. It offers them anyway.
The authenticator app is the recommended method: it works offline. The physical security key — YubiKey, Titan — is the safest.
- Temporary lockout after a run of failed attempts
- Changing your password signs out all your active sessions
- A confirmation email goes out on every security change
Access log
4 sign-ins · 0 unknowniPhone · Montreal
RecognisediPhone · Montreal
RecognisedBrowser · Montreal
RecognisediPhone · Quebec City
RecognisedA sign-in you do not recognise? Revoke the connections and change your password — both buttons are on the same screen.
| When the second factor is asked for | Requirement |
|---|---|
| Sign-in from a new device | Always |
| Password change | Always |
| Revoking a bank connection | Always |
| Export of your data | Recommended |
METHODS OFFERED
3app, physical key, text messageBACKUP CODES
10generated on activationALREADY USED
2last generated on April 12BACK DOOR
Noneincluding for the Yoseri teamOn opening
Face ID on every launchSwitched on with one toggle, under App protection.
In public
Hide amounts in the backgroundWhen the app goes to the background, the amounts are veiled — including in the preview the system keeps of the app.
Notifications
One a day, at mostSix alerts are active in the worked example, and Yoseri will never send more than one notification a day, whatever their number.
donnees | Read the authorisation before granting it. It is written for that.
Free with manual entry, no banking credentials and no card. You see your first statement in four minutes.
The export is complete, readable, and needs no Yoseri tool.
An export that only opens where it was produced is not an export: it is a screenshot. Yours is 6 files and 2,461 rows, in CSV, JSON or PDF, and opens in any spreadsheet.
2,461 rows, including the findings and their source data.
You choose what goes and over what period — this month, this year, everything, or a custom range. The six blocks can be exported together: transactions, accounts and balances, investments, debts, envelopes and goals, and the AI findings with the data that produced them.
- 1,842 transactions over 24 months, with their envelope and their merchant
- 4 credit lines with their amortisation, principal and interest separated
- 1.2 MB in total — your complete financial history fits in an attachment
Export your data
CSV · JSON · PDF1,842 rows · 24 months
Daily history
Purchases, sales, dividends
4 credit lines
Rules and caps
With their source data
ROWS
2 461FILES
6SIZE
1.2 MBThe export goes out by email with a link valid for 24 hours, protected by your password.
HOSTING
Canadaat rest and in backupENCRYPTION
AES-256and TLS 1.3 in transitCREDENTIALS KEPT
Noneno password, no code, no secret answerDATA SOLD ON
Noneno advertiser, no data brokerYour payment method
Full number never keptThe card is handled by the payment provider: Yoseri keeps just enough to display it — Visa ••4417, expires 09 / 28 — and nothing more.
The irreversible zone
Two buttons, two timelines“Revoke all bank connections” and “Delete my account and my data” live at the bottom of the Security screen, set apart from the rest.
Anonymous comparison
Can be switched off, and roundedExact amounts: never shared.
Yoseri sees the charge, never the use.
The list of what an app cannot know is worth as much as the list of what it knows. A tool that claimed “you do not use this” would be inventing data it does not have, even when the inference looks obvious.
It sees the $100 withdrawal. What you do with it, no.
One $100 ATM withdrawal this month, plus $6 of fees. Yoseri stops there.
- A discrepancy is named and dated, never smoothed over in silence
- No category is guessed from a round amount
- Allocating your cash is the only way the budget stays honest
Cash already allocated
$42.00 unallocatedWITHDRAWALS THIS MONTH
100 $ATM FEES
6 $UNALLOCATED
42 $Allocated by you
−$32.00Allocated by you
−$20.00Yoseri does not know, and says so
24,00 $Reconciliation of August 12: $24 discrepancy · unallocated cash, settled by hand. On August 16 and August 1: three accounts, no discrepancy.
Subscriptions
$756 that counts nowhereTwo charges of $62.98 a month have run for eleven months, with no other transaction at either merchant.
Receipts
The image does not leave your phoneReceipt photo: on your device.
Findings
A finding is never adviceEvery finding shows its period, its confidence level and the number of transactions used.
Two recurring charges totalling $62.98 a month have run for eleven months — $756 a year. Do you use them? Yoseri sees the charge, never the use — only you know.
A stale figure is shown as stale.
Bank connections go down — an institution changes its authentication mechanism, a password is changed, a service has an outage. What matters then is that nothing is presented as current without being so.
$115,079.90, and the date of the last reliable read right below it.
With no connection, Yoseri shows your statement as it stood at your last sync — 3 h 12 ago in the example shown — with the amount marked frozen value and the timestamp of the last reliable read: August 16, 6:29 a.m.
- An account that stops answering is marked “stale”, never shown as current
- Reconnecting picks up where the sync stopped — nothing is lost
- Yoseri sees the charge, never the use: being offline changes nothing about that limit
Offline
Frozen value115 079,90 $
Net worth · last reliable read August 16, 6:29 a.m. — 3 h 12 ago
Available offline
1,842 rows over 24 months
Yes7 envelopes, caps included
YesSynced on return
YesUnavailable offline
No read possible
NoNo read possible
NoThey need fresh data
NoNo amount is presented as current until the connection is back.
Authentication refused
“No data was transmitted”The failure screen gives the technical code — AUTH_REJECTED — its timestamp of August 16, 9:41 a.m., and what travelled: nothing.
What support sees
Your messages, not your transactionsA person answers, not a bot: 4 business hours on average.
Reconnecting
Nothing is lost, everWhen an institution changes its authentication mechanism — on August 12 in the example shown — you have to redo the authorisation once, and after that it holds.
What people ask us before connecting an account.
Short answers, including when they are disappointing.
And if you get hacked?
Let us start with what is not at stake: Yoseri holds no banking credentials, no verification code, and no token capable of moving a dollar — the scope requested excludes any write, in either direction.
And if Yoseri shuts down?
You leave with everything, and you can do it today to check that it is true. The full export — 6 files, 2,461 rows, 1.2 MB — opens in any spreadsheet as CSV, in any editor as JSON, or reads as it is in PDF.
Why should I believe you?
You should not, on our word. First, the check with a third party: your own bank’s consent window shows the scope requested before you accept — read it, it does not come from us. It is the most private mode there is, and it costs nothing.
What does a Yoseri employee see?
When you write to support, the team sees your messages and the state of your connections — for example that a National Bank card has not synced since August 12 at 10:10 p.m. It sees neither the detail of your transactions nor your balances.
Can I use Yoseri without connecting any account?
Yes, entirely, and free for life. You can even explore the app without creating an account: the four answers of the walkthrough stay on your device, and if you leave, nothing is left of them.
I lose my phone tonight. What do I do?
You sign in from a browser, with your verified email and one of your backup codes — that is exactly what they are for, and it is why verifying your email is not a formality at sign-up.
The cohort comparison — is that my data leaving?
It can be switched off, and nothing identifying comes out of it. What can enter the aggregate, if you switch it on, are ratios rounded into bands — your savings rate, your management fees, your cushion in months.
Keep looking around
The four steps of signing up, including the one where you read the authorisation before granting it.
See the walkthrough PricingFree is not a demo: unlimited manual entry, and no security feature billed for.
See the pricing Accounts and net worthThe $115,079.90 you are worth net, and why a stale amount is shown as stale.
See the accountsRead the authorisation. Then decide.
The walkthrough shows you the authorisation screen in full before any connection, and you can refuse it without losing the app: manual entry asks for no banking credentials and stays free for life.
Read-only, always. Your answers stay on your device until you create an account.