Skip to content

Security

How money moves with Orwanna, what we read from your bank and what we never do.

DRAFT, pending legal review

Written on 5 November 2026 from Orwanna's approved lines and section 11 of the privacy policy. Not a W6 text: the website session added it so the page would not be empty.

How the money moves

A licensed partner initiates each payment. Orwanna never initiates, holds or executes it: the money goes from your account straight to your debt, after you confirm at your bank.

  1. Orwanna proposes this week's send, with the amount.
  2. You confirm it in the app.
  3. Your bank asks you to confirm it the usual way: fingerprint, a code or its app.
  4. The money leaves your account and reaches your card.

What we read from your bank

We read your transactions to work out the round-ups, through European open banking (PSD2). You give permission at your own bank and can withdraw it whenever you like. We don't sell your data. Delete your account and it's all gone within 24 hours.

How we protect your data

  • All connections between the app, the website and our servers are encrypted.
  • We do not store your bank login details, our licensed partner's access tokens or passwords.
  • We strike out the full IBAN of your accounts before storing it, and the app shows only the last four digits.
  • Sign-in codes and sessions are stored as a fingerprint (hash), not in readable form.
  • Only the people at [RAZÓN SOCIAL] who need it can access the database, each with their own account.

If something looks wrong

Write to [EMAIL DE CONTACTO]. If you think you have found a security flaw, tell us before publishing it and we will answer.