Private by architecture, clear in language.

User tables use Row Level Security, ownership indexes, and explicit grants. COAs live in private user-scoped storage with short-lived access.

Authenticated health payloads, notes, compounds, doses, reactions, and documents are not sent to product analytics.

The product does not claim zero knowledge, unverified HIPAA compliance, or that data can never be accessed under any circumstance.