Security & Data Protection
Last updated: 3 July 2026
moonScan processes sensitive-feeling information, including camera-derived physiological signals. We treat security as part of the product.
1. Our security principles
We aim to:
- minimize unnecessary data collection;
- avoid storing raw video by default where possible;
- restrict access to sensitive data;
- protect data in transit;
- use secure infrastructure;
- monitor for misuse;
- maintain internal access controls;
- delete data when it is no longer needed;
- respond responsibly to security issues.
2. Admin access
Internal access to scan-related data should be limited to authorized team members who need access for support, debugging, security, or product reliability.
Admin access should be role-based, logged where possible, and limited to what is necessary.
3. Raw image and video policy
moonScan's preferred approach is to store extracted signals and diagnostics, not raw face video.
If raw image or video storage is ever needed, it should require:
- specific purpose;
- explicit consent;
- limited retention;
- restricted access;
- deletion pathway;
- auditability.
4. Reporting security issues
If you believe you found a vulnerability or security issue, contact:
Please do not exploit, access, delete, modify, or share user data.
moonScan is not a medical device and does not provide medical advice.