Security

Last updated: 29 October 2026

Security is shared between us and you. This page explains how Money is designed, what we do, and what you need to do. No system is perfectly secure, and nothing here is a promise that you will not lose money or that an attack cannot happen.

Non-custodial by design

Money does not hold your funds. You sign every transaction with your own wallet and your own keys. We never ask for your private key or seed phrase and we cannot move your funds. That removes one kind of risk, but it also means that if your keys are lost or stolen, we cannot help you get funds back.

What we do

• Our website and app are served over encrypted connections.
• Forms on our website can only add new rows to our database. The public database key cannot read stored submissions back.
• We use error monitoring (Sentry) to find faults. Session replay is off.
• We load analytics and advertising tools only under the consent rules in our Privacy Policy.
• We use a managed sign-in and database service (Supabase) for accounts and form submissions.

What you should do

• Never share your seed phrase or private key with anyone. No one from Money will ever ask for it.
• Check the address and the amount on every transaction before you sign.
• Be careful with links, direct messages and "support" accounts. Scammers copy trading apps. Only trust our official website and the app from the official store.
• Be careful signing messages that ask for permission to spend your tokens. You can lose funds that way.
• Keep your device and your wallet app up to date, and turn on two-step sign-in where you can.
• Be especially careful with new tokens. A token can be built to take your money.

Report a vulnerability

If you find a security problem in Money, please tell us before telling anyone else, and give us a reasonable time to fix it. Email [Security contact email to be confirmed] with what you found and how to reproduce it. Please do not access other people's data, disrupt the service, or test with other people's accounts.

See also Risk Disclosure and Privacy Policy.