Consumer Information — Open Banking & Data Access

How Rawa uses your financial account data

Rawa connects to your NZ bank accounts, KiwiSaver, and investment accounts to show you a complete, up-to-date picture of your financial position. This page explains exactly what data we access, why we access it, and what we will never do with it.

Last updated: February 2026  ·  Operated by Tupu Associates, New Zealand

Why we request access

What you get from connecting your accounts

When you connect your bank accounts to Rawa via Akahu, you gain a single, real-time view of your entire financial life:

  • Net worth at a glance — see your total personal net worth across all bank accounts, KiwiSaver, investments, and manually-added assets, updated daily
  • Account balances and transactions — view real-time balances and recent transactions from all your connected accounts in one place
  • Historical tracking — daily snapshots build a wealth history so you can see how your net worth has grown over time
  • Emergency access — if you designate a trusted contact, they can see your complete financial picture in the event you are unable to manage your own affairs
  • Business/personal separation — Rawa automatically separates business accounts (e.g. company accounts) from personal finances
Scope of access

What data we access — and what we don't

We DO access

  • Account names, types, and numbers (masked)
  • Current and available balances
  • Transaction history (descriptions, amounts, dates)
  • Institution name and connection status
  • Account status (active/inactive)

We NEVER do

  • Initiate any payments or transfers
  • Move money between accounts
  • Access or store your online banking credentials
  • Share your data with advertisers or third parties
  • Access data outside the scope listed above

Read-only access only

Rawa requests read-only account and transaction data. We have not enabled payment or transfer permissions. It is technically impossible for Rawa to move money from your accounts.

Access duration

How long we maintain access

Rawa requests ongoing (enduring) access to your connected accounts. This means once you connect your accounts, Rawa can refresh your balances and transactions automatically on a daily basis — you don't need to reconnect each time.

This ongoing access is what enables the daily snapshot feature and historical net worth tracking. Without ongoing access, Rawa would only be able to show you a one-time snapshot with no history.

You can revoke access at any time — see Your Rights below.

Powered by Akahu

What is Akahu, and how does it protect you?

a

Akahu

New Zealand's open finance API — akahu.nz

akahu.nz

Rawa uses Akahu to connect to your NZ bank accounts. Akahu is a New Zealand company that provides a regulated open finance API, allowing you to securely share your financial data with applications you choose — without giving those applications your banking password.

  • Your banking credentials stay with your bank. You authenticate directly with Akahu and your bank — Rawa never sees your internet banking username or password
  • You control the connection. You can disconnect your accounts from Akahu at any time via my.akahu.nz
  • Akahu is NZ-regulated and operates under New Zealand privacy and financial services law
  • Tokenised access only. Rawa uses secure access tokens (not passwords) to fetch your data. Tokens can be revoked without changing your banking credentials

For full details on how Akahu handles your data, see the Akahu Privacy Policy .

Privacy & data storage

How we store and protect your data

Data storage

Your financial data (account balances, transaction history, and daily snapshots) is stored in a secured PostgreSQL database. Your Akahu access tokens are stored in encrypted form. We retain your data as long as your account remains active. When you delete your Rawa account, all your data is permanently deleted from our systems.

Document encryption

Documents you upload to the Rawa Document Vault are encrypted in your browser using AES-256-GCM before they reach our servers. Your encryption passphrase never leaves your device. We store only ciphertext — we cannot read your documents.

Data sharing

We do not sell, rent, or share your financial data with third parties for any purpose, including advertising. Your data is used solely to provide the Rawa service to you. The only exception is emergency access: if you have configured a trusted contact, that person can request a read-only view of your financial summary under the terms you configured.

New Zealand Privacy Act 2020

Rawa is operated by Tupu Associates, a New Zealand company. We comply with the New Zealand Privacy Act 2020. We collect only the personal information necessary to provide the service, and we handle it in accordance with the Act's information privacy principles.

Your rights & controls

You are always in control

You have full control over your data and your Akahu connection at all times. Here's what you can do:

Disconnect your bank accounts from Rawa

Go to Rawa Settings and remove your Akahu connection. Rawa will immediately stop receiving data from your accounts. Historical data already stored in Rawa remains until you delete your account.

Disconnect from Akahu directly

Log in to my.akahu.nz and remove the Rawa app from your connected applications. This immediately revokes all access tokens — Rawa will be unable to retrieve any further data.

Delete your Rawa account

Contact us at the address below and we will permanently delete your account and all associated data, including your financial history, documents, and Akahu connection.

Request a copy of your data

Under the Privacy Act 2020, you have the right to request a copy of all personal information we hold about you. Contact us to make a subject access request.

Revoke emergency access

You can revoke your trusted contact's emergency access at any time from Settings → Emergency Access. All access is immediately terminated.

Contact us

Questions about your data?

If you have any questions about how Rawa uses your financial data, want to exercise your privacy rights, or have concerns about data handling, please contact us:

OperatorTupu Associates
CountryNew Zealand
Servicerawa.kiwi
Emailhello@tupu.co.nz

This page fulfils the consumer information requirement of the Akahu App Accreditation standard.