Built for cautious contact data.

Google and Apple login only. No password auth. No custom OAuth scopes.

Share tokens, mobile tokens, export tokens and Wallet download tokens are stored hashed or signed server-side.

Billing uses Polar.sh as Merchant of Record so checkout, tax handling and customer portal stay outside Sevu client code.

Security inbox: security@sevu.app.