Security & Trust
We take security seriously. Here's what we do to protect you.
Version 1.1.0 · Effective July 17, 2026
End-to-End Encryption
All data in transit is protected with TLS 1.2+ encryption.
Secure Authentication
Email one-time codes, optional passkeys, and biometric App Lock (Face ID / Touch ID) protect account access.
Data Privacy
We never sell your data, and we share only what is needed to run the service, as described in our Privacy Policy.
Certified Infrastructure
Built on certified partners: Privy (SOC 2 Type II) secures wallets, and MoonPay (PCI DSS, licensed) handles card payments and KYC.
Infrastructure Security
Enterprise-Grade Infrastructure
Built on trusted cloud providers and designed for high availability, with wallet infrastructure backed by Privy's 99.99% uptime SLA.
Audited Core Infrastructure
The wallet and payment infrastructure we build on undergoes regular third-party security audits and penetration testing by independent firms.
Monitoring & Alerts
24/7 security monitoring and incident response to quickly detect and mitigate potential threats.
Data Protection
Encryption at Rest & in Transit
All sensitive data is encrypted using industry-standard algorithms (AES-256) both at rest and in transit.
Access Control
Role-based access control (RBAC) and principle of least privilege to ensure only authorized personnel access sensitive data.
Data Retention Policies
We maintain strict data retention policies and securely delete data when no longer needed.
Compliance through certified partners
Payflip is built on infrastructure partners that hold independent security certifications, so the most sensitive operations never touch our servers.
Wallet signing keys are secured by Privy, which is SOC 2 Type II certified and audited by independent security firms. Keys live in trusted execution environments, never on our servers.
Card top-ups are processed end to end by MoonPay, a PCI DSS certified and licensed payments provider. Payflip never receives or stores card details.
Identity verification and anti-money-laundering checks for fiat purchases are performed by MoonPay, which is regulated and licensed across the jurisdictions it operates in.
We collect only what the App needs, never sell personal data, and handle it as described in our Privacy Policy.
Report a security issue
If you discover a security vulnerability, please report it responsibly to our security team:
security@payflip.xyzWe appreciate your help in keeping Payflip secure. Please allow us time to address the issue before public disclosure.
For security-related questions or concerns, reach out to us at support@payflip.xyz