Security

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Authentication

We use JWT-based authentication with short-lived access tokens and hashed refresh tokens stored in the database.

Payments

Payment processing is handled by Stripe. We never store raw payment card information.

Vulnerability Disclosure

If you discover a security issue, please contact security@StayKutumb.com. We follow responsible disclosure practices.