Privacy
Your data. Our obsession.
A plain-English explanation of exactly how your data is protected — and why the architecture was built this way.
Health Data Encryption
Your HSV status is encrypted at the application layer the moment you enter it. The encryption key is stored separately from the data it protects. Even in a breach, your health information is unreadable.
Verification Photos Destroyed
Your verification selfie is processed entirely in server memory, compared to your profile photos, verified, and permanently deleted in the same request. It never touches a database or disk.
Discreet Notifications
Push notifications never mention the app name, never reference HSV, and never include message previews. Every notification is sanitized before delivery. From the outside, no one can tell what sent it.
Biometric Lock & Screen Blur
The app locks after 5 minutes of inactivity and requires Face ID or Touch ID to reopen. When you switch apps, the screen is automatically blurred in your task switcher so nothing is visible.
Contact Blocklist Hashing
Phone numbers are hashed on your device before they ever leave it. Our servers only receive irreversible hashes. We never see an actual phone number. The list is matched and destroyed instantly.
Founder Accountability
The founder has HSV. His own data is in this system. He has the same stake as every other user in getting privacy right. Every architecture decision is made with that in mind.