Jump to a section
How to do it
1. Open bank connections
Sign in to Cashflow Pilot, then look for Bank Connections in Personal or Business settings, or under Portfolio connections. You can leave Cloud Sync off. If the connection option is unavailable, use statement imports instead.
2. Choose an available provider
Choose a provider only if it appears in the app, then follow the steps shown. Support and any provider fees may vary.
3. Choose your accounts
Choose the accounts you want to connect, if that choice is offered.
4. Review new transactions
Check imported transactions for duplicates, incorrect categories or missing details.
5. Manage your connection
Use the connection settings to review or disconnect an available connection.
Bank connection security & saved access
Cashflow Pilot uses the same SimpleFIN-compatible Bank Sync integration for SimpleFIN Bridge and Lunch Flow Bridge. This is read-only bank-data access for balances and transactions, not permission to transfer money. Some institutions and aggregators require bank credentials; SimpleFIN says its connectivity partner MX, not SimpleFIN's own servers, handles those credentials. Lunch Flow has a separate provider arrangement and a separate REST connection for certain investment holdings.
In Security & saved access, choose Don't save (session memory only; default), This device (iOS Keychain or passphrase-encrypted browser vault), or Encrypted sync (explicitly saved owner-only E2EE credential, restorable with your recovery secret). Previously saved copies remain until separately deleted. The Cashflow Worker temporarily processes access credentials and provider responses for authenticated requests; these live provider calls are not E2EE against the Worker. Confirmed imports become Cashflow Pilot financial records.
SimpleFIN's privacy policy says MX can retain connected banking data indefinitely and removes associated MX data within two weeks after an account or connection is deleted. SimpleFIN reports a May 28, 2026 MX incident potentially involving account names, balances and transactions for up to 39 users; it says bank passwords were not exposed. This is a provider disclosure, not an incident reported by Cashflow Pilot. Lunch Flow's practices may differ.
To fully disconnect: revoke access with SimpleFIN/Lunch Flow and, where supported, your bank; then delete any local Keychain/browser-vault credential and encrypted cloud copy separately. Deleting a Cashflow Pilot credential does not revoke an upstream provider token or erase already imported transactions. Never share an access URL, setup token, bank password or MFA code with support. More on bank-connection security →
Related guides
- Import bank and credit card transactions
- Use Cloud Sync on your devices
- Get started with Cashflow Pilot
Want the bigger picture? Explore the Personal, Portfolio and Business product tour →