How Fudi protects your account

Fudi combines access controls with additional verifications for the highest impact actions.

Access protection

• Passwords are stored using Django's secure mechanisms, not as readable text.
• Google and Apple validate identity through their own providers before linking access.
• Verification codes have a defined purpose and validity. A code from another request does not authorize the action.
• Sends and retries have limits to reduce abuse.

Sensitive actions

Changing a password generates a notice by email. Deleting an account requires a code sent to the registered email. Transferring ownership of a restaurant requires verification tied to that application.

When you delete an account, Fudi revokes your sessions and tokens. Signing out from a device ends access for that session; If you suspect that someone knows your password, change it immediately.

Never share passwords or security codes. Fudi will not ask you to send a code via chat, phone or email.