TrueLayer Open Banking
We partner with TrueLayer, an FCA-regulated provider trusted by banks across the UK. Connections are read-only — TwoPennies cannot move or hold your money.
Loading TwoPennies…
Loading TwoPennies…
Security & privacy
TwoPennies is built so sharing finances never means losing control. From encryption to consent flows, every part of the experience keeps trust front and centre.
Awaiting partner approval to share. Because consent is everything.
We partner with TrueLayer, an FCA-regulated provider trusted by banks across the UK. Connections are read-only — TwoPennies cannot move or hold your money.
Account data is encrypted using AES-256-GCM. Tokens are stored separately with unique IVs so even in transit your data stays sealed.
Every visibility change requires both partners to agree. Requests expire, actions are logged, and you can always see what’s shared.
A human-readable timeline keeps track of invites, visibility decisions, and major events without feeling corporate or heavy.
TrueLayer
Open Banking partner for secure, read-only connections.
Supabase
Row Level Security + EU-hosted Postgres infrastructure.
Stripe
Billing handled via PCI-DSS Level 1 infrastructure.
Never. TwoPennies is read-only. We connect to your bank with your permission via TrueLayer and fetch balances, transactions, and pot data. You authorise the connection from your bank’s secure interface and can revoke it at any time.
Only you and your partner. Accounts stay private until you both agree to share them. Even if one partner invites the other, visibility requests still need approval. Support staff can’t view couple data without explicit written permission.
TwoPennies runs on Supabase Postgres in EU-West data centres with encryption at rest. We follow GDPR guidelines for data portability and deletion. Request a full export or complete deletion any time after launch day.
We monitor uptime with automated health checks and error tracking through Sentry. Rate limiting protects against abuse, and our infrastructure scales automatically on Vercel.
Email hello@twopennies.app for security questions or responsible disclosure. We reply within 2 business days.