PayUp takes data security seriously. Here's how your information is protected.
Authentication
- Powered by Firebase Authentication — a Google-backed platform trusted by millions of apps.
- Email verification required before accessing club data.
- Secure password hashing — PayUp never stores passwords in plain text.
- Third-party sign-in (Google, Microsoft) supported via OAuth 2.0.
Payment security
- All payments processed by Stripe, a PCI Level 1 certified payment processor.
- PayUp never sees, stores, or has access to card details.
- 3D Secure (SCA) supported for additional authentication on card payments.
- Stripe handles all fraud detection, chargebacks, and dispute resolution.
Data isolation
- All club data is fully isolated — one club cannot see another club's data.
- Firestore security rules enforce that only authorised members can read or write data for their club.
- Role-based permissions ensure players, admins, and owners only access what they should.
