SECURITY

Your money, locked down.

A wallet is only worth using if you trust it. Here is exactly what protects your money and your details in the Bevura app — no vague reassurance, just what is actually built in.

Getting into your wallet

• A four-digit PIN, chosen by you

  Your PIN is set during signup and is required to log in. Only you know it — no one at Bevura can see it or read it back to you.

• Fingerprint or face, if your phone supports it

  Turn on biometric login under Privacy & Security and unlock with your fingerprint or face instead of typing your PIN. Your biometrics never leave your phone.

• Three wrong attempts and the account locks

  Someone guessing your PIN runs out of tries quickly. After three failed attempts the account is locked and you will need to go through recovery to get back in.

• The app locks itself when you put it down

  Set how long Bevura waits before locking — from immediately to a minute — under Privacy & Security. Leaving your phone on a table does not leave your wallet open.

• Security questions for recovery

  You set answers to recovery questions during signup, so you can get back into your wallet if you forget your PIN.

Every time money moves

Logging in is not enough to spend anything. Every action that moves money — a transfer, a bill, a withdrawal, a merchant payment, a group contribution or a loan — asks you to authorise it again.

• Re-authorise with your PIN or biometrics

  You confirm the amount and the recipient on screen, then approve with your PIN or your fingerprint. A phone left unlocked in someone else's hand still cannot send your money.

• You see the fee before you confirm

  The exact charge for that specific transaction is shown on the confirmation screen, every time, before you approve anything.

• Approvals you did not start

  Where a transaction needs your sign-off, it arrives as an approval you can review and accept or reject — again behind your PIN.

• A receipt for everything

  Every completed transaction produces a receipt you can share or save, and stays searchable in your history.

Your data on your phone

• The local database is encrypted

  Bevura stores your wallet data on your phone in an encrypted database, so it is not readable by other apps or by anyone who picks up the device.

• Login credentials live in your phone's secure storage

  Session tokens are kept in the operating system's own protected keystore, not in ordinary app settings.

• Certificate pinning is implemented

  The app ships pinned certificates for its own servers, so traffic can be checked against them rather than trusting any certificate a network offers.

• Your ID is read on your phone

  During verification the camera reads your document on the device itself — it is not sent to a third party to be scanned.

• Card details are never stored in full

  When Bevura cards launch, security codes are never kept on your phone or on our systems after a transaction, in line with card industry rules.

Regulated, and separate from us