Security Information

Last updated: 25 July 2026

Local-first by design

Proofio is built to work offline. Your inspections, photos, generated PDF reports, and preferences are created and stored locally on your device. Photo image files and PDF reports stay on the device and are not uploaded to our servers.

Credential protection

If you sign in, your session credentials are stored using encrypted on-device storage. The app does not store your password in plain text. Payments are handled by the Apple App Store or Google Play, so we never receive or store your payment card details.

Cloud data & access control

Account data and, if you choose to sync, your inspection records are stored on managed cloud infrastructure (our Supabase backend). Access is protected by row-level security policies so that each account can only read and modify its own data. Billing-related fields (such as subscription status) can only be changed by our trusted server processes, not by client apps.

On-device processing

Features such as barcode/QR scanning and text recognition (OCR) run entirely on your device using on-device machine-learning libraries. The images used for these features are not sent to any server.

Data in transit

When the app communicates with our backend — for example, to sign in or sync — that traffic is encrypted using HTTPS/TLS.

Account deletion

You can request deletion of your account and associated account data at any time. See the account deletion page for details on what is removed and how to request it.

Reporting a security issue

If you believe you have found a security vulnerability in Proofio, please report it responsibly by emailing jerry@proofio.online. We appreciate reports and will work to address confirmed issues promptly. Please give us a reasonable opportunity to investigate and fix an issue before disclosing it publicly.

Contact

Questions about our security practices? Email jerry@proofio.online.