Security
Last updated October 2026
Encryption everywhere
Health data is encrypted on your device with AES-256 before it's stored, and everything moves over TLS 1.3. Encryption isn't a feature tier — every account gets all of it.
Infrastructure
SafeBelly runs on EU-hosted infrastructure with access limited, logged, and protected by multi-factor authentication. Analytics are self-hosted for one reason: so your health data never has to leave systems we control.
Fail-safe by design
Security for us includes the verdicts themselves: when data is uncertain the engine fails toward caution — “no” or “check the pack”, never a false “yes”. Every release is validated against a held-out test set before it ships, with allergen false negatives treated as release blockers.
Responsible disclosure
If you believe you've found a vulnerability, please email support@newdayapps.com. We read every report, respond quickly, and credit researchers who help keep SafeBelly safe.