Data Security & Privacy Overview
Proxi — Inner Leadership AI Coach
Your conversations with Proxi are personal. Protecting them is built into the product, not bolted on afterward. Here is a plain-language summary of the measures in place to keep your information private, secure, and under your control.
Your data is private and isolated
Strict per-user access. Every record is locked so that you can only ever see your own information. There are no “open” settings that would let one user reach another’s data.
Controlled couple sharing. For couples coaching, shared access is limited to your own partnership and only when both partners have opted in.
Access is tightly controlled
Verified identity on every request. The system confirms who you are on each interaction and never trusts unverified inputs.
No secrets in your browser. Sensitive keys live only on secured servers; none are exposed in the app or website. The source code is kept in a private repository.
Locked-down automated jobs. Background processes (reports, reminders) require a secret key and reject any unauthorized request by default.
Sensitive information is encrypted
Encryption for the most sensitive data. The highest-sensitivity records are encrypted at rest using industry-standard encryption, with keys held in a protected vault and readable only by authorized server processes.
We don’t keep data longer than needed
Automatic clean-up. Routine processes remove old and unused data on a schedule, including trial and unregistered records, so information isn’t retained indefinitely.
Account-linked deletion. When an account is removed, its associated personal data is removed or de-identified.
Protected against common attacks
Hardened against injection. Database queries use safe, parameterized patterns; a full audit confirmed and closed the only at-risk areas.
Continuous security review. Every code change is automatically scanned for security issues before it ships, with an additional full review run weekly.
Account & infrastructure hardening
Two-factor authentication. All administrative accounts are protected with two-factor authentication and leaked-password protection.
Ongoing monitoring. Security and configuration are reviewed on a recurring monthly schedule against an approved baseline.
In short: your information is encrypted where it matters most, walled off from other users, kept only as long as needed, and continuously monitored — so you can focus on the work, not on who can see it.
For full details on what we collect and your rights, see our Privacy Policy. Questions? Email info@proximitycoaching.com.