Effective Date: July 10, 2026
Keeping your data safe is a core part of the PawDex experience. Because we do not rely on centralized remote servers for data storage, our attack surface is significantly reduced. This Security Information page outlines the specific cryptographic and physical security measures employed by PawDex to protect your local data.

1. Local Data Encryption

Even though data is stored on your personal device, we protect it with standard OS-level encryption frameworks:

iOS: We utilize Apple's Data Protection API, ensuring that files are encrypted with keys tangled to your device's passcode and hardware UID.
Android: We leverage the Android Keystore system and EncryptedSharedPreferences, utilizing AES-256-GCM encryption for all structured local data.

2. Biometric Access Controls

To prevent unauthorized access, PawDex supports secondary biometric authentication including FaceID, TouchID, and Android Biometric Prompt.

3. Zero-Knowledge Cloud Backups (Optional)

Optional backups are encrypted locally before transmission. We do not hold the keys and cannot decrypt your data.

4. Network Security and APIs

All API calls are strictly routed through HTTPS using TLS 1.3 to prevent MITM attacks. We use no ad-tracking libraries.

5. Vulnerability Disclosure

Please report any vulnerabilities to our security team at security@pawdex.app.