Built security-first
Your clients trust you with their dogs. You can trust us with the data.
HeelYeah! holds real information about your business: client contacts, behavior notes, medical details and payments. Protecting it was a design goal from the first line of code, not an afterthought.
“I'm a security engineer with more than ten years in the field. I treat your clients' data the way I'd want a vendor to treat mine.”
Nick · FounderFollow your data
Every safeguard is a checkpoint between your clients and your records. Scroll through them in the order your data meets them.
-
01 · Encrypted in transit
Everything travels over HTTPS.
Traffic between your clients, your team and HeelYeah! is encrypted the whole way, so nothing sensitive moves in the clear.
-
02 · Filtered at the edge
A firewall stands in front of the app.
A web application firewall absorbs common automated abuse before it ever reaches the app, let alone your data.
-
03 · Walled off by identity
Your business is sealed from every other.
Every record is scoped to your business and tied to your signed-in identity, never to anything sent in a request. Another trainer's account simply cannot reach your clients, notes or files.
-
04 · Least-privilege access
Your team sees what their role allows.
Decide who can manage billing, client records and settings. Trainers see only the clients assigned to them; owners see everything.
-
05 · Encrypted at rest
Stored data is encrypted on AWS.
Client records, notes and uploaded files are encrypted where they sit, so nothing sensitive sits in the clear either.
-
06 · Private, expiring file links
Photos and documents aren't public.
Media is served through short-lived signed links, so a copied link doesn't stay open forever.
-
07 · Card numbers never touch us
Stripe handles payments end to end.
Stripe is a PCI-certified payments provider. HeelYeah! never sees or stores full card details, so there's nothing on our side to steal.
Why security is personal here
Built by someone who does this for a living
Most software for small businesses is built fast and secured later, if at all. HeelYeah! is different because of who built it: a security engineer with more than ten years in security. Protecting data isn't a box checked at the end; it's the lens it's built through.
If you ever have a question about how something is protected, you can ask directly.
Talk to me about it- 01Assume nothing from the client.
- 02Scope every record to its owner.
- 03Encrypt by default.
- 04Give the smallest access that still gets the job done.
What we promise, and what we won't pretend
We promise
- Transactional only. We email your clients about their training, never marketing. There's no list to leak or sell.
- Privacy by default. Your data is yours. We don't sell, rent or mine it, and we never will.
- Export or delete, any time. Want a copy of your data? Email us and we'll export it. Your clients can ask to delete their records whenever they like.
- A direct line. Questions about how something is protected go straight to the person who built it.
We won't pretend
“Unhackable.”
No software is, and anyone who says otherwise is selling something. Security is ongoing: we keep actively hardening the platform, and we'd rather tell you that honestly.
Security questions
Software you can hand your clients with confidence
Start free and see what HeelYeah! can do for your business. No credit card, and a direct line to Nick.
Get Started