PhysioTwin is an educational simulator that runs locally (the engine binds to 127.0.0.1) or entirely in the browser. It handles no personal or patient data and must never be used with real patient data.

If you find a security problem, for example in the local API or the build or release pipeline, please report it privately through GitHub's "Report a vulnerability" (Security tab) instead of opening a public issue.