Privacy

Your wellness journey is personal

We know that there are some things you might not want to share with us—and that’s okay. We’ve designed our services and our privacy policy to make sure that you can still access support without needing to disclose more than you want to, and with the confidence that your information will be kept private and secure.

Prioritizing Privacy

Below are some of the measures that have been implemented to safeguard your privacy and information.

Secure Encryption

Secure Encryption

Data is encrypted in transit and at rest using AES encryption with 256-bit keys, as recommended by the US National Institute of Standards and Technology and Federal Information Processing Standard.

Access Monitoring

Access Monitoring

Network access is inspected in real time and permanently logged. Intrusion attempts are automatically identified and blocked , mitigating SSH attacks and other malicious behavior.

Password Protection

Password Protection

All password and security questions are cryptographically salted and hashed before storage. This means that they are heavily encrypted and are never stored in plain (viewable) text.

Database Backups

Database Backups

Database backups are automatically completed on a regular schedule. Databases are encrypted, backed up nightly, and stored in multiple locations.

Automatic Detection

Automatic Detection

The platform maintains a Host-based intrusion Detection (HIDS) system that automatically detects potential intrusions and anomalous activities. We immediately investigate, respond to and resolve any issues that are discovered.

Internal Policies

Internal Policies

Comprehensive internal policies have been implemented to ensure privacy is maintained from an administrative perspective. All employees undergo extensive privacy and security training.