Security and privacy at Club Cure.

Club Cure treats wellness data as sensitive personal information. We use secure account access, protected payment flows, least-privilege data access, and regular security reviews to reduce risk.

Last reviewed June 18, 2026.

Access control

Member accounts, coach workflows, and role-gated data access are separated so people only reach the information their role requires.

Payment protection

Checkout is handled through a dedicated payment provider. Club Cure does not store full card numbers in the application.

Ongoing review

Security scans are run after backend changes, with database access policies and sensitive functions reviewed before release.

Data handling

What we protect.

Personal wellness information

Labs, genetics, intake responses, goals, and progress notes are treated as sensitive member data.
Access is limited through backend policies and authenticated sessions.
Wellness insights are used to support the member experience, not to replace professional medical care.

Accounts and communication

Authentication is required before private dashboard areas can be accessed.
Session changes trigger fresh data checks so private content does not remain available after sign-out.
Operational emails and account messages should never ask members to send passwords or payment details by reply.

Operational practices

New database tables are created with row-level access rules and explicit grants.
Privileged backend logic is kept server-side and is not exposed in the browser bundle.
Webhook-style integrations verify trusted callers before processing sensitive events.

Important wellness notice

Club Cure is educational and wellness-focused. It does not provide medical diagnosis, treatment, or emergency services. Members should review health decisions with qualified clinicians.