At FIYR, ensuring the security of your data is one of our highest priorities. We are committed to safeguarding your personal and financial information, and we employ advanced technologies to keep it secure. This page outlines our security practices, how we handle your data, and the steps we take to protect your privacy.
We use industry-leading security measures to protect your information:
- 256-bit encryption to protect your data at rest.
- Transport Layer Security (TLS) and Secure Socket Layer (SSL) to protect data during transmission.
- Your account login credentials are never shared or stored by FIYR. These are securely managed by our partner, Plaid.
We enforce password complexity requirements to help protect your account:
- Passwords must be at least 8 characters long.
- Passwords must include at least one uppercase letter.
- Passwords must include at least one lowercase letter.
- Passwords must include at least one number.
- Passwords must include at least one special character.
For an added layer of security, you can enable two-factor authentication (2FA) in your account settings. With 2FA enabled, you'll be required to enter a verification code in addition to your password when logging in. We strongly recommend enabling this feature to further protect your account.
FIYR connects to your financial institutions via Plaid, a trusted leader in financial data aggregation. When you connect your bank accounts through FIYR:
- Your login credentials are stored only by Plaid, not by FIYR.
- Access to your accounts is read-only, meaning we can view your data but cannot move or modify your funds, nor can we access your full account number
- Plaid uses secure APIs to ensure data exchange is protected at all times. For more details, refer to Plaid's security policies.
We leverage the power of the Google Cloud Platform (GCP) for our infrastructure, adhering to strict industry standards for security, privacy, and compliance. Your data is stored in Google Firestore and secured through Firebase authentication, both of which are designed to meet the needs of financial-grade services.
We believe your financial data belongs to you — and only you. Here's our commitment:
Your bank username and password are never transmitted to or stored by FIYR. Period. All authentication happens directly with your bank through Plaid's secure infrastructure. Our team has zero access to your credentials.
FIYR can only view your transaction history to provide insights — we cannot move money, make transfers, or modify anything in your accounts. It's technically impossible for us to touch your funds.
Your financial data is processed automatically to generate your insights and reports. Our team does not manually review, access, or analyze individual user transactions. Your spending habits stay private.
You're in complete control. Disconnect any linked account instantly from your settings, and we'll stop receiving data from that account immediately. You can also request full deletion of your data at any time.
Your data is never sold, rented, or shared with advertisers or third parties for marketing purposes. We make money from subscriptions, not from exploiting your information.
We regularly review and update our security practices to align with the latest industry standards. We also conduct internal audits to ensure data handling and storage processes remain secure and compliant.
If you have any questions or concerns about our security measures, please reach out to us at support@fiyr.app. We are committed to transparency and ensuring your trust in our platform.