Security

Demysti5 never asks for, and never stores, your passwords, PINs, or banking credentials. We don't need them, and we don't want them.

If anyone contacts you claiming to be Demysti5 and asks for a password or your banking details, it isn't us. Please report it to [email protected].

Your score is calculated from the answers you give during onboarding and your ongoing activity in the app, combined with a safe scan for publicly-known data exposure (like whether your email address shows up in a known data breach). We don't log into your accounts, and we don't need your credentials to do this.

Pro subscription payments are processed by Stripe, a payment provider used by many major companies. Your card details go directly to Stripe; Demysti5 never sees or stores your full card number.

The Demysti5 website and app run on Google Cloud / Firebase infrastructure, primarily hosted in Australia. We use industry-standard practices, like encrypted connections (HTTPS) between your device and our servers, to protect data in transit.

If you've found a security vulnerability in the Demysti5 website or app, we'd genuinely like to know. Email [email protected] with what you found and how to reproduce it, and we'll get back to you.

Please don't publicly disclose a vulnerability before giving us a reasonable chance to look into it and fix it.

For the full picture of what we collect, why, and how you can access or delete it, see our Privacy Policy.

Questions about security? Email [email protected].