Security

sexxWise uses Firebase Authentication, HTTP-only server sessions, owner-scoped Firestore rules, server-only writes for sensitive collections, separate Together reveal rules, server-only billing and AI credentials, data minimization, Privacy Mode, Discreet Mode, raw export, and scoped deletion.

A Firebase App Check site key is configured. Deployment enforcement and monitoring still require operational verification.

sexxWise does not claim end-to-end encryption, zero-knowledge architecture, encrypted private-note fields, perfect security, bank-level or military-grade security, a formal security certification, or an active bug-bounty program.

Users can sign out, use Privacy and Discreet modes, hide Explore navigation, withdraw optional adult-content access, delete scoped data, export raw data, and request account deletion. Sensitive-section reauthentication and session management are not represented as complete until fully wired.

Send a clear description, affected URL, reproduction steps, and impact to support@sexxwise.com. Do not access another person's data, disrupt the service, use social engineering, publish unresolved sensitive details, or demand a bounty. sexxWise does not promise payment.

sexxWise maintains an internal incident-response draft covering detection, containment, data-category assessment, provider coordination, jurisdiction analysis, notification, documentation, and special handling of health and sexual-wellness data. The operational procedure requires security, privacy, and legal review.