Security

STEEZE will never ask for your mobile money PIN, a one-time code, your bank card PIN or CVV, or your telecom account password — not by email, not in the app, not on the phone. Anyone asking for those while claiming to be STEEZE is not us. Report it to hello@steeze.finance.

We are not a bank, telecom or mobile money provider, and we are not affiliated with or endorsed by any of them. Provider names in the app are plain labels you use to organise your own Pockets.

• Traffic between your device and STEEZE is encrypted in transit over HTTPS.
• Passwords are handled by our managed authentication provider and stored only as hashes — we cannot see them.
• Every record is scoped to its owner by database-level access rules, so one account cannot read another's data.
• Administrative tools are restricted to authorised STEEZE staff accounts.
• Account emails are sent only from our own domain, steeze.finance.

The Auto Logger reads only the transaction alert text you explicitly paste or share into the app. It has no background access to your inbox, and it never requests telecom or banking credentials. Every parsed entry is shown for you to confirm or edit before it is saved.

• Check the address bar reads steeze.finance before signing in.
• Use a password you do not reuse anywhere else.
• Ignore any "STEEZE" message asking you to send money or share a code.
• Sign out on shared devices.

If you believe you have found a security issue, email hello@steeze.finance with the subject "Security report" and enough detail to reproduce it. Please give us reasonable time to fix the issue before disclosing it publicly, and do not access or modify other users' data while testing. We read every report and will acknowledge you.