Back to home

Your health data. Protected like it matters.

The biggest apps in women's health have paid millions in settlements for selling your most intimate data to advertisers. We built the opposite — from the infrastructure up.

Privacy by Design, Not by Accident

When women's health apps treat your data as a product to sell, trust breaks. When fertility tracking apps share your most intimate cycles with advertisers, safety breaks. When pregnancy apps monetize your journey to motherhood, dignity breaks.

Fight the Number was built differently. Privacy isn't a feature we added — it's the foundation we started with.

HIPAA-Compliant by Architecture

Your data receives the same protection as your doctor's records

What this means for you:

Your health data on Fight the Number is treated as Protected Health Information (PHI) under HIPAA regulations. This isn't a checkbox we added after building the platform — we architected every system from day one to meet the same standards your healthcare provider must follow.

Technical safeguards include:

  • Encrypted storageAll data at rest uses AES-256 encryption
  • Access controlsRole-based permissions with multi-factor authentication
  • Full audit loggingEvery access to your data is tracked and auditable
  • Staff trainingEvery team member undergoes HIPAA compliance training

Zero Data Selling. Full Stop.

Your subscription is our business model, not your data

Our commitment:

We do not sell, license, rent, or share your personal health information with advertisers, data brokers, analytics firms, or third parties. Ever. This prohibition is absolute and irrevocable.

Other femtech apps have settled with the FTC for millions after selling fertility data, pregnancy status, and health metrics to Facebook, Google, and data brokers. We built our entire business model around the opposite principle: you pay us, we serve you, and your data stays yours.

What we never do:

  • Share your cycle data with advertisers
  • Sell your pregnancy or fertility status to data brokers
  • Provide your health metrics to analytics firms
  • Use third-party tracking pixels that expose your health data
  • Monetize your personal information in any form

Your right to deletion: If you delete your account, your personal health data is permanently deleted from our systems within 30 days. No backup retention. No “anonymized” data that can be re-identified. Gone means gone.

Vendor Agreements That Protect You

Every integration operates under contractual privacy protection

Business Associate Agreements (BAAs):

Every third-party integration on Fight the Number — including Perfect Corp skin analysis, wearable connections (Apple Health, WHOOP), smart scales, lab integrations, and at-home monitoring devices — operates under a signed Business Associate Agreement.

This means your data doesn‘t leave our ecosystem without contractual protection that requires the same HIPAA standards we follow. If a vendor can‘t sign a BAA, we don‘t integrate with them.

Explicit consent required:

You maintain control over which integrations you enable. When you connect a wearable, lab portal, or analysis tool, you explicitly consent to that specific data flow — and you can revoke access at any time.

End-to-End Encryption

Bank-grade encryption protects your data at every layer

Encryption infrastructure:

Your health data is encrypted both at rest and in transit using AWS KMS (Key Management Service) — the same encryption infrastructure used by healthcare systems, financial institutions, and government agencies.

  • At rest: All data stored in our databases is encrypted using AES-256
  • In transit: All data transmission uses TLS 1.3 with perfect forward secrecy
  • Key management: Encryption keys are rotated regularly and stored separately from data

Limited internal access:

Even our own team cannot access your personal health data without an auditable, documented reason — and any such access is logged, time-limited, and subject to review. Your data isn't just protected from external threats — it's protected from unnecessary internal access too.