Effective September 8, 2026 · Version 2026-09-08.2
Lessen is operated by Udom Software LLC, a Nevada limited liability company, doing business as Lessen, 732 South 6th Street, Suite N, Las Vegas, NV 89101. Email: admin@lessen.app.
Report a security issue
Email admin@lessen.app with “Security report.” Describe the affected public page or function, the issue, and the minimum steps needed to reproduce it. Use your own test account and synthetic information. Do not send passwords, active sign-in links, secret keys, patient records or a full database dump. If a sensitive attachment is necessary, first ask for a secure transfer method.
We will assess reports and work to address verified issues. This is not a paid bug-bounty program and does not promise a reward or a particular response time. Reports are not monitored continuously. Avoid public disclosure of an unresolved issue that would expose people; coordinate a reasonable disclosure timeline with us.
Testing boundaries
Do not access, change, copy or delete another person's information. Stop if you encounter it and report the minimal evidence. Do not conduct denial-of-service, social engineering, credential attacks, payment fraud, mass account creation, persistence or destructive testing. No permission is granted to test Stripe, Supabase, SharpSports, Apple, Google or another third party. Their systems and terms are separate.
We will not pursue a claim under our Terms solely for good-faith, proportionate reporting within these boundaries. This commitment cannot bind third parties or legal authorities, excuse unrelated unlawful conduct, or authorize privacy invasions. Ask before conducting a test outside these boundaries.
Accessibility and support
We aim to make Lessen usable with common assistive technologies and welcome accessibility feedback. We do not claim certification or perfect compatibility on every device. Email admin@lessen.app with the page, device or assistive technology and the difficulty. We will work with you on a reasonable alternative where available. Do not include sensitive patient details in the report. Ordinary support and accessibility messages are not emergency channels.