How Eleven keeps you safe

Watch mode (beta) · Last updated: 31 October 2026

The short version. Today Eleven runs in watch mode. It reads your bank alerts and tells you what's happening with your money. It cannot move money, open accounts, or touch your cards. It never asks for your bank login, card details or banking PIN, and you can lock it, cut it off or wipe everything with one message.

1. What watch mode can and can't do

Can: read bank alert emails (if you connect Gmail), read statements and screenshots you send, work out balances, spending and safe-to-spend, set reminders and budgets, and spot subscriptions.
Can't: send, transfer or withdraw money, pay bills, cancel subscriptions for you, change anything at your bank, or send, delete or edit your emails.
So even if someone took over your chat with Eleven, they couldn't take money through it. The worst they could do is see your financial information, which is what lock and panic are for.

2. What we never ask for

Your internet banking or app username and password.
Your card number, CVV or card PIN.
Your banking transaction PIN, token codes or OTPs.
Your Gmail password. Google handles sign-in, and Eleven never sees it.

If anyone claiming to be Eleven asks for any of these, it isn't us. Report it to [email protected].

3. Gmail: read-only, and only bank mail

Read-only permission. Eleven asks Google for the gmail.readonly permission only. It cannot send, delete or change any email.
Filtered inside Gmail. Eleven searches only for emails from known bank and fintech sender addresses, drawn from the CBN's lists of licensed banks, microfinance banks and fintechs. Emails that don't match never leave Google.
Only the facts are kept. From each alert we extract the transaction details (amount, date, merchant or counterparty, bank, type) and keep a reference to the email. Non-financial emails are not stored.
Account numbers are cut down. We keep only the last 4 digits of an account number, enough to tell your accounts apart.
Encrypted access. The access token Google gives us is encrypted with AES-256-GCM and locked to your Eleven account, so it can't be used for anyone else's.
Your past and present. On connect, Eleven reads the last 90 days of alerts, then new alerts as they arrive.
"Google hasn't verified this app." During the beta you may see this warning when connecting. It's because Google's verification for new apps takes time, not because anything is wrong. You can disconnect any time with /disconnect or at myaccount.google.com/permissions.

4. Statements and screenshots

You can send a PDF or CSV statement, or a screenshot of an alert, instead of connecting Gmail.
Eleven extracts the transactions and keeps those, not your other personal details.
For password-protected statements, the password is only used to open that file. Tip: you can delete that message from your chat afterwards.

5. Your chats and your identity

Eleven works in Telegram, iMessage and WhatsApp. Your account is tied to your verified messaging identity, the phone number or account those apps have already confirmed.
One account per person. If you use Eleven on more than one app, they're linked automatically only when the app has verified the same phone number, or you connect the same Gmail. There are no link codes to phish or share.
One place for alerts. Proactive messages (alerts, reminders) go to the one app you choose, so your money information isn't spread across devices.
All traffic to and from Eleven is encrypted in transit (HTTPS/TLS).

6. Lock and panic

🔒 Lock (privacy mode). Say lock (or /lock) on any app. Eleven instantly hides every balance, amount, transaction, receipt and budget on all your linked chats, and alerts arrive without any numbers ("New activity on your account. Unlock to see it."). Your bank alerts keep syncing quietly, so nothing is missed.

Unlock with unlock. If you'd like, set an unlock password (say set unlock password). You then unlock on a one-time secure page, and the password is never typed into the chat. Five wrong tries pauses unlocking for 15 minutes.

🚨 Panic (lost or stolen phone). From any other chat you still have, say I've lost my phone (or /panic). Eleven:

locks everything, and plain "unlock" stops working;
cuts off and unlinks the chats on the lost phone;
cancels any outstanding one-time links;
sends you a checklist: block your SIM with your network, call your banks, and change your Gmail password.

Getting back in: sign in with Google using the Gmail you connected. If you never connected Gmail, you can request a 24-hour recovery from a chat you still trust. It's announced on your other chats, and any of them can cancel it.

7. How the AI is kept on a leash

Eleven doesn't train on your data. Your messages, emails and transactions are used to answer you, not to build AI models.
No money tools. In watch mode the AI has no ability to move money. There's nothing for it to be tricked into doing.
Numbers come from code, not guesses. Balances, totals and safe-to-spend are calculated by our software from your transactions. The AI explains them, it doesn't make them up.
Minimum context. Each request sends the AI only what it needs: your question, a few recent messages and the relevant figures. Account numbers are already reduced to the last 4 digits.
Safety switches don't depend on AI. Lock, unlock, panic, disconnect and delete are handled by plain code, so they work even if every AI model is down.
Short memory. For conversation context Eleven keeps only your most recent messages, plus the facts you choose to tell it (like payday or rent).

8. Your controls

lock / unlock: hide or show your money info.
/panic: lost or stolen phone.
/disconnect: cut off Gmail. We revoke access and delete your Google tokens straight away.
/forget: wipe your data, memory and chat history with Eleven.
mute: stop unprompted heads-ups.
To access or export your data, email [email protected]. See our Privacy Policy for your rights under the Nigeria Data Protection Act 2023.

9. When Eleven can move money (coming later)

Paying bills and other actions will arrive in a later version, with stronger protection built in:

Your money will be held by CBN-licensed partner institutions, not by Eleven.
Every payment will need your explicit approval and a PIN entered in a secure form, never in the chat.
The AI can only propose an action. Our software checks it and carries it out. Instructions found inside an email or document will never create a payment.
Spending limits, extra checks for new recipients, and a freeze on payments after a phone or chat change.
Panic will also freeze cards and cancel pending payments.

We'll update this page and tell you in Eleven before any of this goes live.

10. Report a problem

Found a security issue, or think your account was misused? Email [email protected] with "Security" in the subject. Please don't share bank passwords or PINs, because we'll never need them.