Security

Your data is safe with us

Lyssna is built on industry-standard security practices. Here's exactly how we protect your account, audio, and data.

Encryption in Transit

All data between your device and Lyssna servers is encrypted using TLS 1.2+. Every connection is HTTPS — no exceptions.

Secure Authentication

We use Google OAuth via Firebase Authentication — no passwords stored on our end. Your Google account's security protects your Lyssna account.

Firebase Security Rules

Our Firestore and Storage instances use strict security rules — users can only access their own data. Server-side rules are enforced regardless of client requests.

Minimal Data Retention

Audio input files are not stored beyond what is needed to complete your generation. You can delete your generation history at any time from within the app.

Security Headers

Our web app is served with security headers including X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and Permissions-Policy to protect against common web vulnerabilities.

Trusted Infrastructure

Lyssna runs on Google Cloud / Firebase infrastructure with 99.9% uptime SLA, automatic backups, and enterprise-grade physical security.

Found a security issue? Please report it responsibly to [email protected]. We take all reports seriously and respond within 48 hours.