What we never ask for
Rabit Ledger will never ask you for a bank or card login, card number or CVV, a PIN, an OTP code, or a crypto seed / recovery phrase or private key — not in the app, not by email, and not on WhatsApp. If anyone asks for these in our name, it isn't us. Please report it to support@rabitledger.site.
How we protect your data
- Encrypted in transit: every connection to Rabit Ledger uses HTTPS.
- Hashed passwords: passwords are handled by our authentication provider and stored hashed; nobody, including us, can read them.
- Per-account access rules: database rules ensure each signed-in account can only read and change its own records.
- Email verification: new accounts must confirm their email address before using the app.
- Minimal data: we don't connect to financial institutions, so there are no bank credentials to steal.
Keeping your account safe
- Use a strong password you don't use anywhere else.
- Always check the address bar shows rabitledger.site before signing in.
- Sign out on shared devices.
Reporting a vulnerability
If you believe you've found a security issue, please email support@rabitledger.site with the details and steps to reproduce. Please don't access other users' data or disrupt the service while testing. We'll acknowledge your report and keep you updated.