Encrypted in transit and in storage. Read-only with your bank.
Westara shows your wealth; it doesn't manage it. What you connect stays yours.
- Encrypted connection. Your data is stored encrypted. You connect eToro with a read-only API key that you create yourself at eToro. Westara rejects keys with write rights.
- Optional two-factor sign-in with an authenticator app, on every plan: Free, Solo, the trial, Family, and your own server.
Access only with your sign-in.
Sign in with email and password, or with a one-time magic link sent to your inbox. You stay signed in on each device until you sign out.
Optional two-factor sign-in with an authenticator app, on every plan: Free, Solo, the trial, Family, and your own server.
Encrypted in transit. Encrypted in storage.
Your connection to Westara is encrypted (HTTPS). Your data is stored encrypted. We store your financial data in Frankfurt am Main (EU). When you ask an AI question, we send the question and the household details needed to answer it to an AI provider in the US. Details are in our privacy policy. Connection keys and 2FA secrets are stored encrypted. You don't enter your bank login details and TANs in Westara. You enter them in the form of finAPI GmbH, an account information service provider supervised by BaFin (for some banks, directly on your bank's own page).
Westara processes your numbers in order to show them to you, and never moves money.
IBANs, shortened.
For newly connected accounts, Westara stores only the last 4 digits of the IBAN.
Reading, yes. Payments, never.
Coming: live bank sync (Solo, Family and the Solo trial) will run read-only through finAPI GmbH, an account information service provider supervised by BaFin: 3,500+ banks. More than 99% coverage in Germany, and other European banks the connector lists. You don't enter your bank login details and TANs in Westara. You enter them in the form of finAPI GmbH, an account information service provider supervised by BaFin (for some banks, directly on your bank's own page). Westara only reads and cannot move money: no transfers, no standing orders, no limit changes. You renew the consent at your bank about every 90 days, and you can revoke it at any time in the app or at your bank.
finAPI sees the raw bank lines in order to fetch them. File import (CSV, CAMT) doesn't use it.
Westara never asks for a PIN or TAN by email or text. If anyone does, it's fraud.
You decide who sees what.
On Family, members see household figures according to their role: Owner, Admin, Member or Viewer. Me / person / All is a filter on each person’s books, not one shared book. Other households never see your numbers. Anyone who leaves takes their own accounts with them.
When you use Ask Westara, only a small slice of what you already see goes to the AI provider, never IBANs or full account numbers. Nothing is written without your confirmation.
Export or delete, at any time.
"Export my data" downloads a complete copy. Delete your budget, your portfolio or the whole account under Profile → Security & data.
On your own server.
Same app, no subscription on that install. Bring your own keys for AI and live bank. 2FA (authenticator app) available on your own server.
Self-host from source: technical setup today. A ready-to-run Docker image and the Start9 package are in progress.
Can Westara move money from my account?
No. The bank connection is read-only. Payments would need a separate payment consent, which Westara doesn't use.
Does Westara store my IBAN?
For newly connected accounts, only the last 4 digits. Your connection to Westara is encrypted (HTTPS).
Who can see my bank bookings?
You; on Family, members according to their role; and, for fetching, finAPI GmbH (an account information service provider supervised by BaFin). File import involves no third party.
Is Westara certified?
We don't advertise certifications or audits. What we do is described on this page.
Is there two-factor authentication?
Optional two-factor sign-in with an authenticator app, on every plan: Free, Solo, the trial, Family, and your own server.