Is my data private and GDPR-compliant?

Your data is hosted in the European Union and health information is encrypted. Health data is a special category under GDPR, and we treat it that way.

When you use a photo to pre-fill your profile, the image is processed and then discarded, never stored. Only the fields you review and confirm are kept.

Public access to your profile is rate-limited to stop anyone from guessing codes at scale, and it is not indexed by search engines. Your profile lives in your account and stays under your control.