Security & Trust

We take security seriously. Here's what we do to protect you.

Version 1.1.0 · Effective July 17, 2026

End-to-End Encryption

All data in transit is protected with TLS 1.2+ encryption.

Secure Authentication

Email one-time codes, optional passkeys, and biometric App Lock (Face ID / Touch ID) protect account access.

Data Privacy

We never sell your data, and we share only what is needed to run the service, as described in our Privacy Policy.

Certified Infrastructure

Built on certified partners: Privy (SOC 2 Type II) secures wallets, and MoonPay (PCI DSS, licensed) handles card payments and KYC.

Infrastructure Security

Enterprise-Grade Infrastructure

Built on trusted cloud providers and designed for high availability, with wallet infrastructure backed by Privy's 99.99% uptime SLA.

Audited Core Infrastructure

The wallet and payment infrastructure we build on undergoes regular third-party security audits and penetration testing by independent firms.

Monitoring & Alerts

24/7 security monitoring and incident response to quickly detect and mitigate potential threats.

Data Protection

Encryption at Rest & in Transit

All sensitive data is encrypted using industry-standard algorithms (AES-256) both at rest and in transit.

Access Control

Role-based access control (RBAC) and principle of least privilege to ensure only authorized personnel access sensitive data.

Data Retention Policies

We maintain strict data retention policies and securely delete data when no longer needed.

Compliance Through Certified Partners

Payflip is built on infrastructure partners that hold independent security certifications, so the most sensitive operations never touch our servers.

Wallet Keys: Privy (SOC 2 Type II)

Wallet signing keys are secured by Privy, which is SOC 2 Type II certified and audited by independent security firms. Keys live in trusted execution environments, never on our servers.

Card Payments: MoonPay (PCI DSS)

Card top-ups are processed end to end by MoonPay, a PCI DSS certified and licensed payments provider. Payflip never receives or stores card details.

KYC / AML: MoonPay

Identity verification and anti-money-laundering checks for fiat purchases are performed by MoonPay, which is regulated and licensed across the jurisdictions it operates in.

Data Privacy

We collect only what the App needs, never sell personal data, and handle it as described in our Privacy Policy.

Report a Security Issue

If you discover a security vulnerability, please report it responsibly to our security team:

security@payflip.xyz

We appreciate your help in keeping Payflip secure. Please allow us time to address the issue before public disclosure.

Questions?

For security-related questions or concerns, reach out to us at support@payflip.xyz