Security Practices

Encryption in transit for all network calls (HTTPS/TLS).
No third-party ads or marketing SDKs.
Local-first data for diary, tasks and schedule. Users can export/delete from Profile.
Strict AI safety: moderation and rules on the Zero backend; no therapy or crisis instructions.
Access control: accounts are parent/guardian-linked; alerts only for critical risk.
Vulnerability reporting: email support.backpack@icloud.com.