Security Policy

At KitBank, security is built into every layer of our platform — from the way we store your data to the way we monitor transactions in real time.

This Security Policy explains the safeguards we use to protect your money and personal information, and outlines the steps you can take to keep your account safe.

It should be read together with our Privacy Policy and Terms of Service which describe how we handle your data more broadly.

All network traffic between your devices and KitBank is encrypted using 256-bit TLS encryption, so no one can intercept your data in transit.

Sensitive information — including passwords, PINs, and payment details — is encrypted at rest using industry-standard algorithms and stored in access-controlled systems.

We never store your full card number or online banking password in plain text anywhere in our systems.

Our proprietary fraud detection engine analyzes millions of data points per second to identify suspicious activity before it causes harm.

• Real-time transaction monitoring flags unusual spending patterns, locations, or device changes.
• Machine-learning models are continuously retrained on new fraud patterns across our customer base.
• High-risk transactions may trigger additional verification (step-up authentication) before they complete.
• Accounts showing signs of compromise are proactively locked and you are notified immediately.

We provide several layers of protection you can enable to strengthen your own account:

• Two-factor authentication (2FA) via SMS, email, or an authenticator app.
• Biometric login (fingerprint or face recognition) on supported devices.
• Step-up verification (SCA) for high-value or unusual transactions.
• Device and session management, so you can review and sign out of active logins at any time.
• Real-time alerts for logins, transfers, and profile changes.

Our production systems run in access-controlled data centers with 24/7 physical security, redundant power, and environmental monitoring.

Internal access to customer data is limited on a need-to-know basis, logged, and reviewed regularly by our security and compliance teams.

We conduct regular penetration testing and vulnerability assessments with independent security firms to identify and remediate risks.

We maintain a dedicated incident response team that monitors our systems around the clock for signs of compromise.

If we detect an incident that affects your account or personal data, we will notify you promptly and explain the steps we are taking, in line with applicable law.

Suspect fraud or unauthorized access? Contact us immediately at [email protected] or through in-app support.

Security is a shared responsibility. Here is how you can help keep your account safe:

• Never share your PIN, one-time password (OTP), or account password with anyone — including anyone claiming to be KitBank staff.
• KitBank will NEVER call, email, or message you asking for your password or OTP.
• Enable biometric login and two-factor authentication for an extra layer of protection.
• Report lost or stolen devices, and any suspicious activity, to us immediately.
• Keep your app, operating system, and antivirus software up to date.
• Avoid banking over public Wi-Fi, and always verify you are on an official KitBank app or website.

We work with carefully vetted partners and service providers — for payments, cloud infrastructure, and fraud prevention — who are contractually required to meet our security standards.

Every vendor with access to customer data undergoes a security review before onboarding and periodic reassessment afterward.

We may update this Security Policy as our systems, products, and threat landscape evolve. The "Last updated" date at the top of this page reflects the most recent revision, and material changes may also be announced in-product or by email.

If you suspect fraud, unauthorized access, or a security vulnerability, contact our security team right away: