Encryption means your data is scrambled into a form that's unreadable without the correct decryption key. Looms encrypts your health data at rest (when stored) and in transit (when moving between your device and our servers).
In transit
All communications between the Looms app or website and our servers use TLS 1.3 — the same standard used by banks and major financial institutions. This means any data transferred — records you upload, vitals you log, messages to centres — is encrypted in transit and cannot be intercepted in a readable form.
At rest
Records and personal health data are encrypted in storage using AES-256, an industry-standard symmetric encryption algorithm. Encryption keys are managed separately from the data itself, so even in the unlikely event of a database breach, stored records would be unreadable without the keys.
What encryption doesn't protect against
Encryption protects data in storage and transit — it doesn't protect against someone accessing your account through your login credentials. This is why a strong, unique password and two-step verification are important. Encryption is one layer of a multi-layer security approach.