Stripe payment security
All payments are processed by Stripe, a PCI-DSS Level 1 certified provider — the highest level of payment security certification. We never store your full card number on our servers.
Encrypted connections
Every connection to TripFund is protected with TLS encryption, so data exchanged between your device and our servers stays private in transit.
Data privacy
We collect only the information needed to operate the Service and never sell your personal data. Access to sensitive data is limited to authorized personnel.
Account protection
Accounts are protected with secure authentication and access controls. We monitor for suspicious activity and recommend using a strong, unique password.
Responsible disclosure
We welcome reports from security researchers. If you believe you've found a vulnerability in TripFund, please report it privately so we can investigate and fix it before any details are made public. We ask that you avoid accessing or modifying other users' data and give us reasonable time to respond.
Email security reports to security@tripfundapp.com. Please include steps to reproduce and any relevant details. We appreciate your help in keeping TripFund safe for everyone.