Security

Your data and your customers’ data come first. Here’s how we protect them.

Payments are handled by Stripe

Stripe holds the payment industry’s highest certification (PCI DSS Level 1). Kyroba never sees or stores card numbers.

Encrypted connection

All of kyroba.app runs on HTTPS: everything between your phone and us is encrypted.

Each business sees only its own data

Rules inside the database stop one business from seeing another’s customers, bookings or payments, even if someone tries on purpose.

Protected database

Data lives in Supabase (PostgreSQL), encrypted at rest. Passwords are never stored as-is: they are stored hashed.

Tests on every release

Before every change, automated tests check, among other things, that nobody can read another business’s data.

We don’t sell data

We don’t sell your data or your customers’ data, and we don’t use it for ads.

What you can do

Use a long password you don’t use anywhere else.
Don’t share your account: invite your team so everyone logs in with their own.
Kyroba will never ask for your password by email, text or phone.
If something looks off in your account, change your password and write to us.

Found a security issue?

Email support@kyroba.app with the subject “Security” and tell us how to reproduce it. We reply within 72 hours. Please don’t access or share other people’s data while we look into it.