Security & trust

How Tovajo protects your account, your information and your group’s records, and what we deliberately do not claim.

Your account

• Passwords are stored using strong one-way hashing; we can never see them.
• Sign-in attempts are rate limited to slow down guessing attacks.
• You can turn on two-factor authentication with an authenticator app.
• You can see your active sessions and sign out any device.
• We alert you to new sign-ins and important security changes.

Your group's records

• Every group runs on a written agreement that every member accepts before it starts.
• Contributions only count once an authorised member confirms them; members cannot confirm their own payments.
• Payment and payout notices in group chat come from the system and cannot be faked by members.
• Important actions are recorded in an audit log that cannot be edited or deleted.
• Material changes, such as a new payout order or target, need the affected members' approval.

Your information

• Other members see your display name and username, never your email, phone number, IP address or device details.
• We collect only what we need to run the service and keep it secure, and we explain this in our privacy policy.
• Data is encrypted in transit (HTTPS). Sensitive secrets are encrypted at rest.

What we do not claim

To be clear about where Tovajo stands today:

• Tovajo is not a bank and does not hold customer funds in Tracking Mode.
• Tovajo does not pay interest or returns, and does not guarantee that other members will pay.
• We do not currently hold a financial licence or any security certification. If that changes, we will say so only once it can be verified.
• Group chat is protected in transit and by access controls, but it is not end-to-end encrypted.

Reporting a security issue

If you believe you have found a security vulnerability, please contact us and choose Support. Do not share details publicly until we have had a chance to fix it.