Protections built into the app
- Each customer signs in through Supabase Auth.
- Bookkeeping pages require a second sign-in step from an authenticator app.
- Supabase rejects known leaked and easy-to-guess passwords during sign-up and password changes.
- Row Level Security separates each customer's database records.
- Receipts use private storage and ownership checks.
- API secrets stay on the server and are not sent to the browser.
- Bookkeeping posts through balanced debit and credit lines.
- Important record changes are preserved in an audit history.
- Vercel and Supabase encrypt network traffic and managed data at rest.
- Supabase Pro provides daily database backups retained for seven days and longer logs.
Before public sales
Vercel Pro
Commercial hosting, spend controls, and stronger operational visibility.
Custom email
Verified support, security, privacy, and authentication email addresses.
Monitoring
Error alerts, uptime checks, security alerts, and performance measurements.
Recovery drill
A documented test proving that customer records can be restored.
Independent review
Attorney review of policies and an outside security test before broad release.
Payment safety
Paid plans use Stripe's hosted Checkout and customer portal. Card numbers go directly to Stripe, so Best Darn Finance App does not store or process full payment-card details. Signed Stripe messages update membership access, and duplicate messages are safely ignored.
Report a concern
A dedicated security email and response process must be published before launch. Customers should never send passwords, complete bank account numbers, Social Security numbers, or payment-card numbers in a support message.