Security & Privacy
Your health data is yours.
We protect your data with strict access controls, private storage, and full transparency about how it is used. You are always in control.
Encryption
All data in transit is encrypted with TLS. Connections to the database and storage layers use secure, authenticated channels.
Access controls
Row-level security ensures that every user can only access their own health data. No user can query another user's metrics, biomarkers, documents, or reports.
Private documents
Uploaded lab reports are stored in private storage buckets. Access requires signed URLs with expiration—no public access is ever granted.
AI permissions
You control which AI features can access your data. AI never silently modifies verified health data. All AI usage is logged with provider, model, and cost tracking.
Data ownership
Your data belongs to you. You can export it, download it, or delete it at any time from Settings → Privacy.
Data export
Export your full health history—metrics, biomarkers, documents, and reports—at any time. Your data is portable.
Account deletion
Delete your account and all associated data permanently. Destructive actions require explicit confirmation and clearly explain what will be lost.
Audit logs
Sensitive actions are logged for accountability. You can review activity related to your account.
What we do not claim
We are committed to honesty about our security posture. We do not claim certifications we do not have.
Have a security or privacy question? We are happy to answer.
Contact us