Security at KAYMO
Your medical data is sensitive — here is how KAYMO protects it
Built for trust
Security isn't an afterthought at KAYMO — it's foundational. From the moment you upload a scan, it's encrypted on the way to KAYMO and while it's stored.
Encrypted in transit and at rest
Your scans travel to KAYMO over an encrypted connection and are stored encrypted with AES-256.
Secure infrastructure
Hosted on Amazon Web Services and Google Cloud, whose infrastructure is independently audited to SOC 2 Type II.
Never sold
KAYMO never sells your data and never gives it to advertisers or data brokers. The companies that run the service, listed on the sub-processors page, process it only so KAYMO can work.
Access controls
Your scans are tied to your account.
Delete a scan any time
You can delete any scan from the app whenever you choose.
Restricted internal access
Inside KAYMO, access to scan data is limited to the people who keep the service running.
How we handle your data
Upload and processing
When you upload your scan files, they travel over an encrypted connection and are stored encrypted. KAYMO turns them into the 3D views and thumbnails you see and keeps those with your scan, so it opens quickly.
Storage and retention
Your scans are stored encrypted in Amazon Web Services. On a free account, scans are archived after 30 days (180 days for scans uploaded before September 1, 2026). Nothing is deleted, and subscribing restores them straight away. You can delete any scan in the app.
How KAYMO answers your questions
To answer a question, KAYMO sends the part of the scan you point at, or the text of your report, to Google's Gemini models on Google Cloud.
Compliance and standards
HIPAA alignment
While KAYMO is a consumer wellness tool (not a covered entity), we follow HIPAA security standards as our baseline, including encryption and access controls.
Your rights under GDPR
If you're in the EU or UK, you can access, correct, delete, or get a copy of your data. Email privacy@kaymo.me.
SOC 2 infrastructure
Our cloud infrastructure providers maintain SOC 2 Type II certification, ensuring ongoing security controls are independently audited and verified.
Important: KAYMO is not a medical device
KAYMO is an educational and wellness tool designed to help you explore and understand your anatomy. It is not intended to diagnose, treat, or replace professional medical advice.
Always consult qualified healthcare providers for medical decisions. The visualizations and AI explanations are for educational purposes only.
Security questions
Have a security question or want to report a concern? Reach out to our security team.