How is my data protected?

Sign-in uses Firebase Authentication; data is stored in Google Cloud Firestore with encryption at rest and in transit. API keys and secrets are stored server-side and never exposed to the browser, and all data access is server-gated.