1. Client-Side Cryptographic Protection
HerCare implements client-side encryption algorithms for intimate user notes and private symptom descriptions. Data is encrypted directly on the mobile device before it is synced over TLS 1.3 to our cloud databases.
2. PostgreSQL Row-Level Security (RLS)
Our core database utilizes PostgreSQL Row-Level Security (RLS). Every database query executes strictly under the authenticated user’s scoped UUID. Users cannot read, query, or mutate records belonging to any other user under any circumstances.
3. Offline-First Architecture
HerCare functions fully offline. All cycle calculations, period countdowns, and symptom logs are recorded immediately to the device’s encrypted local storage. When an internet connection is established, the app performs a delta sync securely.
4. Zero-PII Sanitization for Health Intelligence
Before wellness and hormonal queries are processed by the advisory intelligence engine, all Personally Identifiable Information (PII)—including names, email addresses, IP addresses, and specific identifiers—is scrubbed via our server-side sanitization cluster.
5. Data Deletion & Purge Guarantees
When a user requests account deletion, PostgreSQL database triggers execute cascading deletions that eradicate the user's profile, cycle history, symptom entries, habit logs, and authentication tokens across all active partitions without residual backups retained.