FlipFlip

Security

Your money, your eyes only.

Flip connects to financial accounts so it can answer money questions with real context. The tradeoff is trust, so we keep the basics simple: encrypted data, limited access, and clear permission before important actions.

How account connections work

Bank connections run through Plaid. Flip gets read-only account data like transactions, balances, and recurring charges. We do not see or store your bank username or password, and Plaid on its own does not let Flip move money from your account. Payments go through a payment partner you connect, such as Natural, and only with your approval.

Most brokerage connections run through SnapTrade, which also places the trades you approve. If you connect Robinhood directly or enter a website login in Flip, those credentials are encrypted individually and used only for that service. Website sessions from signing in on your phone are kept in your private browser profile with our browser provider. Keys for the crypto wallets Flip creates or you import are held by our wallet provider, Privy, not stored by Flip, and Flip makes a wallet transaction only on your instruction: one you approve, a standing instruction you set up, or, for a group fund, its members' vote.

What Flip uses your data for

We use connected data to answer the request in front of you: explain a bill change, check what is safe to spend, spot a subscription, or match a deal to your spending. Flip contacts people or businesses only when you ask it to, and asks for your explicit confirmation before it moves money or places a trade, unless you have set up a rule for it in advance.

The basics

  • Encrypted by default. Sensitive data is encrypted in transit and at rest. We keep access narrow and tied to the account action you approved.

  • Read-only bank access. Plaid lets Flip read the information needed to explain spending and cash flow. It does not give Flip your bank password. Money moves only through a payment partner you connect, such as Natural, and only with your approval.

  • You stay in control. Flip asks before meaningful actions happen, or follows a rule you set up and can cancel. Skipping a connection is fine, and you can remove access later.

Our provider’s certifications

The bank connection itself is handled by Plaid, which is independently audited to SOC 2 Type II and certified to ISO/IEC 27001 and 27701. Those certifications cover Plaid’s infrastructure and practices, not Flip itself.

SOC 2 Type II

Independent audit of security, availability and confidentiality controls.

ISO/IEC 27001

International standard for information security management.

ISO/IEC 27701

International standard for privacy information management.

Report a concern

If you think something is wrong with your account, or you have found a security issue, tell us right away at support@fliptexts.com or through the contact page.

Ask us anything