Security

The strongest security is not holding things. We hold no card details, no customer identities and no record of anyone’s movements. If someone breached us tomorrow, there is no pile of money to take and no location history to expose — because neither exists.

Localmoney unlocks access to earning software that is non-custodial: the wallet and its keys are created on the user’s own device and never leave it. We never hold funds and never hold keys, so we cannot move, freeze or lose anyone’s money — and neither can anyone who compromised our systems. There is no central pot of customer funds to target.

A recovery phrase is the master key to a wallet. Keep it safe and offline, and never share it with anyone, including us. We will never ask for it.

Unlocking a spot asks one question of your device — are you inside this venue’s area? — and records only the answer. The coordinates are used to work out yes or no and are not written down. There is no trail of the places you have visited, no map of your day, and nothing that could be handed over or leaked, because it was never stored.

Businesses see counts, never people. A venue learns that visits happened, not who made them. Our privacy notice sets out exactly what is recorded.

Vendor payments are handled by Stripe, which is PCI-DSS compliant. Card details go to Stripe and never to us — we could not leak a card number because we never receive one. Checkout is a redirect to Stripe’s own pages rather than an embedded widget, so their scripts do not run on this site.

A geofence is drawn deliberately coarser than the accuracy of the phones checking against it — roughly 22 metres, because indoor location can drift by 10 to 20. A fence tighter than its own margin of error would refuse people who really are standing in the shop. Getting that trade-off wrong is not a small annoyance; it decides whether an honest visitor is believed.

We also check, using anonymous accuracy measurements that contain no coordinates and no identifiers, whether a venue’s fence looks misplaced — so a badly positioned spot is caught by us rather than discovered by a frustrated customer at the counter.

Holding almost nothing protects you from us being breached. It does not protect the value of digital assets, which rise and fall with the market — people can get back less than they put in. Nor can it protect a recovery phrase somebody has written in a note on their phone, or shared with a stranger who asked nicely. Those remain the one thing only the holder can guard.

If you believe you have found a security issue — a way to unlock a spot without being there, a fence that admits people who are nowhere near, anything that exposes data — please tell us before telling anyone else, and give us a reasonable chance to fix it. We will not pursue anyone who reports a genuine issue in good faith and does not exploit it or access other people’s data. Contact details are in our privacy notice.