Skip to main content
FORMCHECK

Security

Designed to minimize sensitive data.

FormCheck combines short-lived photo processing with account controls and restricted data access. No internet service can guarantee absolute security.

Photo processing

Uploads are validated, image metadata is removed, and prepared photos are processed in memory for the requested analysis. FormCheck does not save source body photos to its database or object storage.

Accounts and stored results

Authentication is handled by Supabase. Database row-level policies restrict users to their own profile and scan history. Stored scan records contain numeric results and analysis metadata rather than source images.

Payments and application controls

Stripe hosts checkout and billing management, so FormCheck does not handle full payment-card details. Billing webhooks are signature-verified. Transport encryption, input validation, rate limits, and redacted application logs reduce common risks.

Report a vulnerability

Email support@formcheck.app with “Security report” in the subject. Do not access other users’ data, disrupt the service, or include sensitive body photos in the report.