JumboFit
Security
Draft - not legal advice / pending legal review. Security details will evolve as JumboFit moves from private beta to production.
Protected app surfaces
The authenticated app is separate from this public landing website and should use production authentication, secure cookies and role-based access.
Sensitive fitness data
Progress photos, body metrics, check-ins, cycle logs and private documents must not be served from public asset storage.
Reports
Security reports can be sent to security@jumbofit.app.