Security

What we do, in plain English.

Feylo asks two people to write down honest things about money. That only works if the handling of it is straightforward and the claims about it are true.

This page describes how the product is built today. Where something is not yet in place, it says so.

There is no password

You sign in with a six-digit code sent to your email address, valid for ten minutes.
Codes are stored as a hash, never as the digits themselves, and are destroyed the moment one is used.
Issuing a new code cancels any earlier one, and five wrong guesses destroys it.
Requests for codes are rate limited by email address and by network address, so a code cannot be ground down by repetition.

Your partner is not an administrator

Whoever created the household has exactly the same access to their partner’s answers as a stranger: none.
No part of the API accepts a household or member identifier. Who you are is taken from your own sign-in, so asking for someone else’s data is not something the system can express.
Your questionnaire answers and your interpreted preferences are yours. They never appear in your profile, your household, or an invitation preview.
What the two of you see about each other is a comparison we write for both of you, not one person’s answers handed to the other.

No bank connection, no transactions

Feylo does not connect to your bank accounts and has no ability to see, initiate or authorise a payment.
It holds the figures you type in — what you earn, what you pay out — and nothing about individual purchases.
We do not hold card details. The beta is free, and there is nothing to pay.
If connected accounts are ever added, it will be a feature you have to switch on, described honestly before you do.

Agreements are a record, not a setting

An accepted agreement is tied to the exact revision the two of you accepted.
If either of you changes something afterwards, the acceptance falls away and it has to be agreed again.
Your plan is worked out fresh from your agreement and your figures every time you open it. It is never stored, so there is no stale copy to leak or to disagree with.

The mechanics

Where your data goes, and how it travels.

In transit: The app talks to our API over HTTPS. There is no unencrypted route into it.
On your phone: Your sign-in token is kept in the device’s own secure storage — the Keychain on iOS, the Keystore on Android — not in ordinary app storage.
Invitations: A partner invitation is a long random token. We store only its digest, it can be used once, it expires, and generating a new one revokes the old.
Signing out: Signing out revokes that device’s token at the server. It does not merely forget it locally.

Just as important

What we don’t claim.

Security pages usually list everything a company does. This is the other half, because the omissions are what you would actually want to know.

We do not describe Feylo as having “bank-grade security”. It is a phrase with no agreed meaning, and we would rather tell you what we actually do.
Feylo is not authorised or regulated by the Financial Conduct Authority. It does not give regulated financial advice, hold client money, or carry out any regulated activity.
Feylo is not an Open Banking participant. Nothing in the product is connected to your bank today.
We have not undergone an independent security audit or penetration test. When we do, we will say so here and say who did it.

Found something?

If you believe you have found a security problem in Feylo, please tell us before telling anyone else. Email [email protected] with enough detail to reproduce it.

We will acknowledge your report, keep you updated while we work on it, and credit you if you would like us to. We will not take legal action against anyone who reports a problem in good faith, avoids accessing other people’s data, and gives us reasonable time to fix it.

Private beta

Worth trusting with the difficult conversation.

Feylo is open to a small number of UK households while we get it right. If you and your partner would like to be among them, tell us where to find you.

We are looking for couples who are willing to tell us plainly what does and doesn’t work. In return you get the product free for as long as it is in beta.