Security
Temples trust us with their devotees. We collect as little as possible, encrypt what we keep, and design so that even temples see totals rather than people.
Encrypted everywhere
Every connection uses TLS, with HSTS preload so browsers never fall back to plain HTTP. All stored data is encrypted at rest with AES-256.
Field-level encryption
The most sensitive details we hold are sealed again, field by field, with AES-256-GCM. The keys that unlock them live in Google Cloud KMS and every use is logged.
Temples see totals, not people
Trustees see how many devotees follow and use their app, never who. Activity is counted under one-way codes. Seva rosters show only a first name and initial.
Payments by Stripe
Card details go straight from your browser to Stripe, a PCI DSS Level 1 provider, inside a secure frame. Our servers never see or store a card number.
Least-privilege access
Database rules enforced by Google decide who can read and write each record. A devotee reads their own profile; a trustee manages only their own temple.
Audit trail
Every administrative action, such as approvals, publishing, team changes and billing, is written to a log that no one can edit.
Safe on your phone
Your sign-in is kept in the iOS Keychain, the app talks to our servers over HTTPS only, and Android backups never copy your session.
Abuse protection
Rate limits on every change, a strict Content Security Policy, App Check to keep scripts out, and continuous secret scanning on our code.
Report a vulnerability
If you believe you have found a security issue, email support@techdigit.com with “Security” in the subject. Please give us a reasonable time to fix it before sharing it. We will not take action against good-faith research.
Your data, your choice
Delete your account from Profile in the app at any time and your data goes with it. Read the Privacy Policy and Terms.