How does Kronos keep my money and data safe?

Security is our top priority. Here's how we protect your account, money, and personal data:

Account Security

• 256-bit AES encryption — all data is encrypted at rest and in transit
• Two-factor authentication (2FA) — SMS, email, or authenticator app
• Biometric login — Face ID and fingerprint authentication
• OTP verification — every transfer and withdrawal requires a one-time code
• Session management — automatic timeout and secure token storage

Banking & Money Safety

• FDIC-insured deposits — held in For Benefit Of (FBO) accounts at Bridge.xyz's partner banks, separate from company funds
• Bank-grade infrastructure — Bridge.xyz is a licensed money transmitter and partners with nationally chartered FDIC member banks
• Real-time fraud monitoring — suspicious transactions trigger instant alerts and automatic account protection
• Rate-limited APIs — all financial endpoints are protected against brute-force attacks

Identity & Privacy

• KYC via Plaid Identity Verification — government ID + selfie + sanctions screening through an industry-leading provider
• Minimal data collection — we only collect what's legally required
• No data selling — we never sell your personal information to third parties
• Data export — download all your data anytime from Settings → Privacy → Download My Data
• Right to deletion — request full account and data deletion from Settings

Crypto Custody

• Non-custodial wallets — your crypto settles to a wallet whose keys only you control. Kronos cannot freeze, seize, or move your assets without your authorization.
• 12-word recovery phrase — back yours up so you can recover your wallet on a new device. See How do I back up my wallet?
• Bridge for buy/sell — our licensed partner handles fiat-to-crypto conversions, then settles directly to your non-custodial wallet
• Constant-time authentication — webhook and API auth uses timing-safe comparison to prevent side-channel attacks
• Deposit scanning — automated every 5 minutes with confirmation requirements per chain

If you notice any suspicious activity on your account, contact support immediately. We also recommend enabling 2FA (Settings → Security) if you haven't already.