Security

Data Security

At HalfThought, we take the security of your data seriously. We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

• All data is encrypted in transit using TLS/SSL protocols
• Data at rest is encrypted using secure encryption standards
• Access to user data is restricted to authorized personnel only
• Regular security audits and vulnerability assessments are conducted

Data Storage

Your data is stored securely in our infrastructure. We use reputable cloud service providers that maintain high security standards and compliance certifications.

For local-first tools, data remains on your device and is never transmitted to our servers unless you explicitly choose to sync or export your data.

Communication Security

All communications with HalfThought Coach via SMS and WhatsApp are secured through our service providers (Telnyx and Twilio), which implement end-to-end encryption and security best practices.

We never store the full content of your messages beyond what is necessary to provide the coaching service and deliver your reminders.

Access Controls

We implement strict access controls to ensure that only authorized personnel can access user data. All access is logged and monitored for security purposes.

• Multi-factor authentication for administrative access
• Role-based access controls
• Regular access reviews and audits
• Secure credential management

Incident Response

In the event of a security incident, we have procedures in place to:

• Quickly identify and contain the incident
• Assess the impact and scope
• Notify affected users as required by law
• Remediate vulnerabilities and prevent future incidents

Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us at hello@halfthought.com. We take security reports seriously and will respond promptly.