All traffic between your device and the Service is encrypted with TLS (HTTPS), so data cannot be read as it travels.
Sensitive data stored by the Service is protected using strong encryption, and passwords are stored only as salted hashes.
Encryption keys are kept separate from the data they protect, with access limited to authorised systems and staff.
Card payments are handled by a PCI-compliant provider; we do not store full card details on our servers.