Health data deserves more than a buried clause in a privacy policy — here's our security commitment on its own page.
Data in transit and at rest is planned to be encrypted using industry-standard protocols.
Internal access to user health data is planned to be limited to what's operationally necessary, logged, and reviewed.
Your logs and photos are used to calculate your score — not sold to advertisers or data brokers.
Health data deserves more than a buried clause. This page exists so anyone evaluating THE FAD — a user, a partner, a healthcare provider — can see our security commitments without reading an entire legal document.
If you discover a security vulnerability, please report it through our contact page — we'd rather hear about it directly than have it disclosed publicly first.