Security at Babu

Encrypted in Transit

All traffic to and from Babu is served over HTTPS, so data moving between your device and our servers is encrypted along the way.

Payments Handled by Stripe

Every payment on Babu — coach subscriptions and client payments alike — is processed end-to-end by Stripe, a PCI-DSS compliant payment processor. Babu never stores your card numbers; that data lives with Stripe, not with us.

Isolated Per Coach

Each coach’s business runs in its own isolated database. One coach’s clients, plans, and conversations are kept separate from every other coach’s on the platform.

Signed Content Delivery

Media and content — documents, training and diet plan attachments, and other files — are delivered through short-lived signed URLs rather than public, permanent links.

Security Headers

Babu blocks framing and embedding of its pages by other sites, and disables content-type sniffing, both enforced through security headers on every response.

Report a Vulnerability

If you believe you’ve found a security issue with Babu, please email us at [email protected] with the details and we’ll look into it promptly.