Yoyo never actually stores your card details. When you enter your card information, it is passed directly from the app to our Payment Service Provider (PSP) (Stripe) who are fully regulated and compliant to UK regulation regarding personal financial information. The PSP then sends Yoyo a token (learn more about tokenisation here) which it can use to request payments to be made. The key benefit here is that since Yoyo never holds your bank card details, you are not at risk in the unlikely event of an attack on our systems.
Stripe is trusted and used by Virgin, The Guardian, Twitter, TED, WIRED amongst many others. The method by which we protect your card details is industry standard and similar to how other apps like Uber, Amazon and most banking apps protect you.