Security
Last updated October 2026
Encryption everywhere
Health data is encrypted on your device with AES-256 before it's stored, and everything is encrypted in transit (TLS). Encryption isn't a feature tier — every account gets all of it.
Infrastructure
SafeBelly runs on EU-hosted infrastructure we operate, with crash reporting self-hosted and no third-party analytics, so your health data never has to leave systems we control.
Fail-safe by design
Security for us includes the verdicts themselves: when data is uncertain the engine fails toward caution — “no” or “check the pack”, never a false “yes”. Every release is validated against a held-out test set before it ships, with allergen false negatives treated as release blockers.
Responsible disclosure
If you believe you've found a vulnerability, please email [email protected]. We read every report, respond quickly, and credit researchers who help keep SafeBelly safe.