Account security
You sign in with an email address and a password, or with a one-time code sent to your phone. Passwords are stored only as a hash, so no screen, log or support tool can show anyone your password, including Sebairo staff.
- Use a password you use nowhere else
- Reused passwords leaked from other sites are a common cause of account takeover. A password manager avoids the problem.
- Keep the phone number current
- It is how a one-time code reaches you and how you get back in if you forget your password.
- Confirm your email
- An unconfirmed address cannot receive a password reset link.
ask for your password, a one-time code or a card number, in a chat message, an email or a phone call. Anyone who does is not Sebairo.
Data protection and privacy controls
Data travels between your phone and Sebairo over encrypted TLS connections, and stored data and files are encrypted at rest. Sebairo's servers enforce permissions, so the app receives only what you are allowed to see, and a modified copy of the app cannot change that.
- Privacy controls
- Choose an audience for each post, keep Memories map location off (it is off by default), and review the people you have blocked in Settings. Your sign-in email and phone number are shown only to you.
- Your data rights
- Delete your account in Settings at any time, or write to support@sebairo.com to request a copy of your data.
Payments
Sebairo has no card field. Card payments are made on the app store's own payment screen, and Sebairo receives the result and a reference.
- Prices are set on the server
- A modified app cannot buy at a different price. The price that applies is the one Sebairo has published.
- Credit follows payment confirmation
- Your wallet is credited only when the payment is confirmed, and a retry never credits it twice.
- Every movement leaves a record
- Top-ups and purchases each carry a reference you can quote to support.
Reporting, blocking and moderation
Posts, messages, listings, streams and profiles all have a report action, and blocking is enforced in both directions. Reports are reviewed by staff in a separate moderation console, and the server refuses moderation powers to ordinary accounts. Actions such as removing content or suspending an account are recorded with the reason.
Reporting a vulnerability
If you find a security problem, write to support@sebairo.com with the word SECURITY in the subject line.
- What helps
- The exact steps, what you expected, what happened instead, and the time it happened. A screenshot helps.
- What we ask of you
- Test against your own account only. Do not access, modify or delete anyone else's data, and allow a reasonable time to fix the problem before publishing it.
Frequently asked questions
Short answers to common questions. The Help Centre covers each topic in more depth.
Can anyone at Sebairo see my password?
No. Only a hash is stored, and no screen or tool can reverse it. Support can reset a password but cannot tell you the old one.
I lost my phone. What now?
Change your Sebairo password from another device right away, then contact support if you cannot sign back in.
Someone messaged me claiming to be Sebairo support.
Report the message and block the account. The note under “Account security” above lists what Sebairo never asks for.
Is my payment safe?
The card step happens on the app store's payment screen, not inside Sebairo, and your wallet is credited only once the payment is confirmed.
How do I report a vulnerability?
Email support@sebairo.com with SECURITY in the subject, and test only against your own account.