Security

How accounts are protected

• Authentication is provided through Supabase Auth.
• Passwords are not displayed to Calorie Repay administrators.
• Multi-factor authentication is available.
• Database Row Level Security is intended to separate each user’s records.
• HTTPS is used to protect data in transit.

Your responsibility

Use a unique password, enable MFA, keep recovery methods secure and sign out on shared devices. Contact us promptly if you suspect unauthorised access.

Incident response

Suspected incidents will be assessed and contained. Relevant service providers may be involved in investigation and recovery. Regulators and affected individuals will be notified where applicable law requires it. No service can promise that a breach will never happen.

Report a concern

Email support@calorierepay.com. Do not include passwords, authenticator codes or unnecessary sensitive information.