Get the app:

Security & Your Data

Operated by: Credit Innovations, LLC

Last updated: June 2026

Security is the product

CreditVana handles some of the most sensitive information you have — your identity and your credit. Protecting it is not a feature we added; it is the foundation everything else is built on. This page explains, in plain language, how we keep your data safe and how you stay in control of it.

How we protect your information

  • Encryption in transit. All traffic to CreditVana is served over HTTPS with HSTS enforced, so data moving between you and us is encrypted.
  • Encryption at rest. Sensitive data is encrypted where it is stored.
  • Bureau-grade handling. Credit data from Equifax, Experian, and TransUnion is accessed and stored under strict controls and used only to deliver the scores, reports, and monitoring you ask for.
  • Least-access principle. Access to member data is limited to what is needed to operate and support the service.

Banking with Vana Cash

Vana Cash is a prepaid debit account issued by Community Federal Savings Bank (CFSB), Member FDIC. Banking services and the safeguarding of deposits are provided by CFSB under its own regulatory and security framework.

What we will never do

  • We will never sell your personal identity data.
  • Checking your own scores through CreditVana is a soft inquiry — it never hurts your credit.
  • We will never ask for your full account passwords by email or text.

How you can protect yourself

  • Use a strong, unique password and enable any available device security (Face ID, fingerprint, or passcode).
  • Be alert to phishing: we will never email or text you a link asking for your password or Social Security number.
  • Turn on alerts in the app so you hear about changes to your credit as they happen.

Reporting a vulnerability

If you believe you have found a security vulnerability, we want to hear from you. Email support@creditvana.com with the details and we will respond as quickly as we can. Please give us a reasonable opportunity to investigate and address the issue before disclosing it publicly.

Related

For how we collect and use data, see our Privacy & Disclosures and Mobile App Privacy Policy.