Your privacy matters—here’s how we protect it

If you’ve ever thought, “Is my data secure with Worress?” you’re not alone. When you’re working through worries, goals, and deeply personal reflections, trust is everything. This guide explains how Worress safeguards your information, what we do (and don’t) do with your data, and practical steps you can take to feel more in control.

What “secure” means at Worress

We design for the three pillars of information security:

  • Confidentiality: Only authorized people and systems can access your data.
  • Integrity: Your data is accurate and protected from unauthorized changes.
  • Availability: Your data is reliably accessible to you when you need it.

No system can be 100% immune to risk, but we build multiple layers of protection to reduce risk and respond quickly if something goes wrong.

How Worress protects your data

  • Encryption in transit and at rest

    • We use industry-standard encryption to protect data as it moves between your device and our servers, and while it’s stored on our systems.
    • Transport encryption (e.g., TLS) helps prevent eavesdropping. Data at rest is encrypted with strong algorithms.

  • Access controls and least privilege

    • Access to production systems is restricted to trained team members who need it to do their jobs.
    • Role-based permissions, multi-step approvals, and audit logs help ensure appropriate and traceable access.

  • Secure development and testing

    • We follow secure coding practices, code reviews, and dependency scanning to reduce vulnerabilities.
    • We test for common risks (e.g., those described in the OWASP Top 10) and conduct regular security assessments.

  • Hardened infrastructure

    • We host in reputable cloud environments with network segmentation, firewalls, and secrets management.
    • Encrypted backups and documented disaster recovery procedures help protect your data against loss.

  • Monitoring and incident response

    • Security monitoring and alerting help us detect unusual activity.
    • We maintain incident response playbooks and will notify affected users if a significant security event occurs in line with legal requirements.

  • Privacy by design and data minimization

    • We collect only what we need to operate, improve, and personalize your experience.
    • Features are designed with privacy reviews and safeguards from the start—not as an afterthought.

  • Responsible AI practices

    • Worress uses AI to help you break down problems and build action plans. We apply data minimization and strict access controls to any AI processing.
    • Where third-party AI services are involved, we use secure connections and contractual safeguards; we avoid sending unnecessary personal data.

What we collect—and why

Worress is built to help you manage worries and make progress. To do that, we may process:

  • Account data (e.g., email, name or alias) to create and secure your account.
  • App content you add (e.g., notes, goals, tasks, reflections) to provide core features.
  • Usage and device data (e.g., app interactions, device type) to improve performance and guide product improvements.

We use your data to operate the service, personalize your experience, and improve features. We do not sell your personal information. For full details, please review our Privacy Policy in the app or on our website.

Your controls and choices

We believe privacy is also about control. You can:

  • Review and adjust privacy settings in your account.
  • Export your data to take it elsewhere or create a personal backup.
  • Request deletion of your account and associated data (subject to legal or safety requirements).
  • Manage email and notification preferences.

If you need help with any of these, contact us via in-app support or the help center listed in the app.

What you can do to protect your account

Security works best as a partnership. Here are simple, high-impact steps you can take today:

  • Use a strong, unique passphrase

    • Create a long passphrase (12+ characters) with a mix of words, numbers, and symbols.
    • Consider a reputable password manager to generate and store unique passwords.

  • Enable available security features

    • Turn on any additional authentication or session security options offered in your account settings.

  • Keep devices and apps up to date

    • Install updates for your operating system and the Worress app promptly.
    • Use a device screen lock (PIN, password, or biometric) and avoid sharing unlocked devices.

  • Be phishing-smart

    • Check sender addresses, beware of urgent requests, and never share your password over email or chat.
    • Access Worress by typing the URL or using the official app rather than clicking unknown links.

  • Protect sensitive exports

    • If you export your notes or plans, store the file securely (e.g., encrypted storage) and delete it when no longer needed.

  • Use safer networks

    • Prefer trusted Wi‑Fi or your mobile network when viewing sensitive content; avoid using public Wi‑Fi without a VPN.

A CBT lens on privacy worry

It’s natural to feel uneasy about data security—especially with personal reflections involved. Try this quick, evidence-based approach to reduce worry and regain control:

  • Name the thought: “I’m worried my notes could be exposed.”
  • Check the evidence: “What protections are in place? What has actually happened?”
  • Separate controllables from uncontrollables:
    • Controllable: my password strength, app settings, device updates, phishing caution.
    • Uncontrollable: the existence of risk on the internet.
  • Choose a next action: “I’ll update my password and review my privacy settings today.”
  • Practice a 1‑minute reset: Inhale for 4, hold for 4, exhale for 6. Repeat 5 times to reduce physical tension.

This process doesn’t eliminate risk, but it reduces unhelpful worry and channels energy into protective action.

FAQs

  • Do you sell my data?

    • No. We use personal data to operate, secure, and improve Worress. See our Privacy Policy for details.

  • Is my content used to train public AI models?

    • No. We don’t use identifiable personal content to train publicly available models. We focus on privacy-preserving improvements and contractual safeguards.

  • Where is my data stored?

    • In secure cloud infrastructure with encryption and layered defenses. Data residency and retention details are available in our Privacy Policy.

  • How do I delete my account or export my data?

    • Use the in-app Settings under Privacy & Data (or the equivalent section) to request an export or deletion. If you need help, contact support via the app.

Our commitment

We know you’re trusting us with sensitive information. Our commitment is to protect it with strong technical and organizational safeguards, to be transparent about how we use it, and to give you meaningful control. If you have questions, concerns, or suggestions, reach out through in-app support—we’re here to help.