On managed cloud infrastructure, encrypted at rest by our database provider and transmitted over HTTPS. Photos are served through signed, time-limited URLs. PINs and passwords are stored as bcrypt hashes; we never see them in plain text. See our
Privacy Policy for the full picture.