Your trust is our priority. Here's how we protect your study data and privacy with enterprise-grade security measures and transparent practices.
Six safeguards baked into every layer of the platform — not bolted on later.
Traffic is protected with TLS/SSL, and sensitive data is encrypted at rest using AES-256.
Strong password requirements (bcrypt-hashed, never stored in plain text) and OAuth sign-in for account protection.
Row-Level Security in our database keeps each account’s content separated. We access your content only to provide the service (e.g. generating your flashcards).
Hosted on managed cloud infrastructure (Supabase, DigitalOcean) with redundant backups and automatic security updates.
We collect only the data necessary to run the service and never sell your personal information to third parties.
A permissions system lets you control who can access the study materials you choose to share.
We align our data-protection practices with recognized privacy standards.
Data-handling practices aligned with EU data protection principles, including account deletion on request.
Practices aligned with California Consumer Privacy Act principles.
GoodOff is intended for users aged 13 and older; the 18+ community section is gated separately.
We implement comprehensive security measures across all aspects of our platform, from development to deployment and ongoing maintenance.
The core protections in place today.
Security researchers and users who discover potential vulnerabilities can report them through our responsible disclosure program.
Email [email protected] or [email protected].
We're available to address any concerns or questions about how we protect your data.
