Permissions, approvals and safety

Permissions you can grant

When you connect an assistant, the Connect an AI client page lists what it asks for. Allow only what you need.

Permission	What it allows
View records	Read your private book: people, entries, expenses, payments, categories, bills, deliveries, schedules, reminders, activity, balances, statements and insights.
Create and edit records	Add and change people, entries, expenses, schedules, reminders and settings, and create statement links.
Record settlements	Record repayments, bill payments and deliveries received.
Request deletions and reversals	Only ask for deletes, merges and reversals. Each one still needs your approval.
Manage sharing profile, connections and group invitations	Your sharing profile and code, connection requests, group invitations and invite links.
View shared expenses and balances	Read your groups, their expenses, balances, comments and activity.
Create and edit shared records and notify participants	Create groups and group expenses, comment, refund, dispute and manage guests. Other members are notified.
Record and acknowledge external shared payments	“I paid” and “I received” in groups, and confirming or rejecting payments.
Stay connected until revoked	Keeps the connection working after you sign out of the browser, until you disconnect it.

Approving a sensitive change

Deleting anything, merging people, reversing a payment, reopening a share or bill, and some group actions (voiding an expense, leaving a group, changing roles) are never done by the assistant alone.

1. The assistant prepares the change and gives you a link to https://owejar.com/confirm/….
2. Open it. The Review this change page shows exactly what will happen.
3. If it’s right, choose Approve change. If your sign-in is older than 10 minutes, OweJar first asks you to confirm with a new email code.
4. Go back to the assistant and tell it you approved. It then saves that exact change.

Approvals expire after 10 minutes, work once, and only for that assistant and that exact change. If you don’t want the change, simply don’t approve it. In the phone app, pending approvals for your private book also appear under Me → Multi-device sync.

How changes are made safely

• Every change is prepared first: nothing is saved until the assistant sends back the exact prepared change.
• If the record changed in the meantime, OweJar reports a conflict instead of overwriting it.
• Retrying a change never creates a duplicate.
• Every change made by an assistant appears in Activity.

Staying connected

• With Stay connected until revoked, an assistant stays connected while you keep using it; its access renews automatically and lapses after a year without use.
• Without it, the connection ends with your browser sign-in and you’ll need to reconnect.
• Signing out of OweJar does not disconnect assistants that stay connected.

Disconnect an assistant

Open Account → Connected apps, choose Disconnect next to the assistant and confirm with Disconnect app. It loses access immediately, and its pending approvals are cancelled. In the phone app, use Me → Multi-device sync → Connected AI clients → Revoke access. Deleting your account disconnects every assistant.

Things only you can do

For your safety, assistants can’t sign in for you, grant themselves permissions, approve their own changes, create view-only group links, accept a guest place on your behalf, change billing, forget a phone or delete your account.