Security and privacy

Last updated: 4 August 2026

The short version

MyMoneyMedic is an Australian financial wellbeing platform. You choose what financial information to connect, you can stop at any time, and what you discuss stays away from employers, clubs and any other organisation that gave you access.

MyMoneyMedic provides financial wellbeing education and support. It does not provide personal financial advice and is not a financial product provider.

Open Banking and the Consumer Data Right

The Consumer Data Right, or CDR, is the Australian framework that lets you share your banking data with an accredited service, with your consent. Open Banking is the part of it that applies to bank accounts.

Connecting an account is a decision you make each time, for a defined purpose and a defined period. You can withdraw consent whenever you want, and doing so stops further data being shared.

The detail of how consent is collected, how long data is kept and how it is deleted is set out in the CDR policy. Where this page and that policy differ, the policy is the authoritative document.

What MyMoneyMedic never does

• Sell your data, or share it with advertisers or data brokers.
• Sell you a loan, credit card, insurance or investment product.
• Take commission for referring you anywhere.
• Tell an employer, club or funder what you discussed or what your finances look like.
• Make decisions about you automatically that affect what support you can reach.

If your organisation gave you access

Clubs, employers and program funders can pay for MyMoneyMedic on behalf of their members, staff or participants. They receive aggregate, de-identified reporting only: how many people engaged, which broad areas of support were used, and how a cohort moved over a program.

They do not receive your name against any of it, your balances, your transactions, or anything you said to Alex. That separation is deliberate, and it is the reason the reporting is built the way it is.

How we protect information

• Everything is served over HTTPS, with HTTP redirected and HSTS set.
• Credentials held by our systems are encrypted at rest, not stored in plain text.
• Access to production systems is limited to the people who need it to operate the service.
• This website loads no third-party scripts, fonts or trackers by default. Analytics loads only if you accept it, and nothing is recorded about which Care Portal services you look at.

Reporting a problem

If you believe you have found a security issue, please email careteam@mymoneymedic.ai with enough detail to reproduce it. We will acknowledge it and keep you informed while we investigate.

To raise a concern about how your information has been handled, see the complaints process.