Yolt and Security
At Yolt, safeguarding your data is one of our core values.
Yolt was designed to be the only money app you need, providing smart insights but also keeping your details and data private and secure.
Yolt is a regulated Third Party Provider (TPP) and as such holds a license to operate within Open Banking.
Yolt is a company owned by ING Bank and is subject to the same security and privacy standards applicable to a bank. ING (hence Yolt) is licensed by the Dutch National Bank (DNB) and as such we can be found on the FCA register
• We are a registered data controller (ICO Data Protection Register)
• We are a licensed Third Party Provider (Open Banking TPP)
• We are supervised by the European Central Bank
• We use the most up-to-date encryption
• We do not sell your data to third parties
• We regularly run penetration and security tests to ensure your data is protected.
• We are owned by ING Bank, and must meet the same privacy and security standards applicable to a bank.
If your bank is one of the many in the Open Banking initiative, you’ll be redirected to your own bank’s authorisation screen or app (using OAuth certification) to confirm and authenticate the connection to Yolt.
On occasion, APIs are not yet available for some accounts. For that we use a data partner which has been arranging the secure handling and processing of user details for many years in the UK and other countries around the world.
Yes. Yolt is a licensed Third Party Provider and, as part of ING Bank N.V, is regulated by the Dutch Financial Authorities and we can be found on the FCA register by clicking here.
Yes! As of the 13th of January 2018, all banks and building societies in the UK are making their customer data accessible to regulated and licensed third parties such as Yolt. Nine of the biggest banks and building societies will provide this data using APIs for current and personal accounts, as will some others, and for accounts without an API we use a trusted data partner.
Yolt and Your Data
For Open Banking, your login credentials are never stored on our servers. Your transaction data, balance, and other data you share with Yolt is stored using state-of-the-art encryption so that you can use the app.
That's why we ask you to unlock Yolt using a PIN, fingerprint or FaceID. To prevent unauthorised access or disclosure, we have physical, electronic and operational measures in place, which secure the user information that we hold. We have run appropriate penetration and security tests to ensure your data is protected using bank grade security.
For Open Banking, your login credentials are never stored on our servers. Your transaction data, balance, and other data you share with Yolt is stored using state-of-the-art encryption so that you can use the app. That's why we ask you to unlock Yolt using a PIN, fingerprint or FaceID. To prevent unauthorised access or disclosure, we have physical, electronic and operational measures in place, which secure the user information that we hold. We have run appropriate penetration and security tests to ensure your data is protected using bank grade security.
When you add your account you'll securely sync the following:
Transactions (usually the previous twelve months, depending on your bank)
Direct Debits and Standing Orders
Basic account information, such as overdraft limit, interest rate, monthly account fees.
If you are syncing with Yolt via Open Banking, you will not be asked to share your password, other than with your bank. If you use the normal sync route, you’d sync your accounts within Yolt itself.
We respect your privacy and personal information. Yolt has been designed to provide insights while also keeping your details and data private. We will therefore only use the information that you agreed to share with us to further develop the app and provide other useful services to you. We do not sell your data.
You can delete your account at any point. We will remove your data from our systems in accordance with data protection regulations.
The quickest way to delete your Yolt account is by heading over to More > Your Profile > Delete My Account. Follow the on-screen instructions to delete your account and all associated data.
Yes. We can do this for you. Please email us at firstname.lastname@example.org. Remember to include: Your name, phone number, and device type to verify your identity.
We respect your privacy and do not sell your data.
If you do decide to leave us, your personal data is deleted in accordance with government data protection regulations (GDPR).
Please note that if you only delete the app off your phone, and not the Yolt account itself, Yolt would still have your details on record. You must ensure that you delete your account by heading to the Your Profile section within the app to delete your account completely.
At Yolt, we regularly run appropriate penetration and security tests to ensure your data is secured. As a licensed and regulated TPP, and as part of ING Bank N.V. we are held to the same security standards as any bank. To prevent unauthorised access or disclosure the data in our app is protected with bank level security using physical, electronic and operational measures.
As a user, you should protect your device and the contents within it. Yolt is protected by a fingerprint, PIN code or facial recognition.
We would never contact you to ask you to confirm or provide us with account information, passwords, PINs or other personally identifiable information.
If you lose your phone, you can get in touch with us and we can remotely delete your account.
Your phone number is an easy way to verify that you’re a real person. We send you a temporary security code during onboarding that activates the app before requesting a 5-digit PIN.
Due to security reasons, we cannot reset your PIN. This means you’ll have to get your recovery code (instructions below) and re-install Yolt. You'll be prompted to insert your code in the onboarding screen, and you'll be right back up and running.