How we protect your money and information
Paying bills means trusting us with sensitive details. Here's how we keep them safe.
Secure, read-only bank connection
You connect your bank through MoneyKit, our bank connection partner. We never see or store your online banking username or password, and our access is read-only: we can see transactions to find your bills, but we can't move money.
Encryption everywhere
Your data is encrypted in transit and at rest. Account and Social Security numbers are stored in a separate, restricted vault.
We never pay your bills
Your money stays in your accounts. The only charge we ever make is your membership fee, collected by our payment partner from the account you choose.
Account protection
No passwords to steal: you sign in with a one-time code we email you (or text you, if you turn that on in Profile and verify your number), or with a passkey you add in Profile (Face ID, Touch ID or your device PIN). Passkeys stay on your device or in your password manager; we only keep the public key, so there's nothing to phish or leak. We alert you when you sign in on a new device and sign out inactive sessions.
Fair rewards
Each bank account can earn for one member, points confirm 7 days after a payment, and we review unusual activity, so rewards stay fair for everyone.
Your data isn't for sale
We use your information to run the service and never sell it to advertisers or data brokers.
Found a security issue?
Report it to our security team and we'll respond within one business day.