Security Policy

We take user data security seriously. Learn about our commitment to protecting your information.

Last Updated: November 6, 2025

Our Commitment

We take user data security seriously. Our goal is to ensure confidentiality, integrity, and availability of all data handled by Eunoia.

Security Practices

We follow industry best practices, including:

Encryption

All sensitive data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Authentication

Secure login with password hashing (bcrypt or Argon2).

Access Control

Strict internal access permissions; no direct database access for non-admins.

Code Security

Regular dependency checks, vulnerability scanning, and CI/CD integrity validation.

Data Backups

Daily encrypted backups are maintained to ensure data resilience and quick recovery in case of unexpected failures.

Incident Response

If a breach or security incident occurs:

  • 1.We will notify affected users within 72 hours.
  • 2.A full investigation and remediation plan will be implemented immediately.
  • 3.Transparency and user safety take priority.

Responsible Disclosure

We welcome security researchers to report vulnerabilities responsibly.

If you discover a potential issue, please email dev@eunoialife.in with:

  • Description of the issue
  • Steps to reproduce
  • Suggested mitigation (optional)

We appreciate ethical reports and do not pursue legal action for responsible disclosures made in good faith.

Infrastructure & Compliance

Our infrastructure partners comply with global standards like GDPR, ISO 27001, and SOC 2. We review these regularly.

User Security Tips

While we ensure server-side protection, we recommend:

  • Using strong, unique passwords.
  • Enabling device-level security (PIN, fingerprint, etc.).
  • Not sharing account credentials.

Contact Us

General support: support@eunoialife.in

Security or technical reports: dev@eunoialife.in