Supported: the latest X.Y line only (same major/minor as the current release). Older lines are unsupported.

Report issues privately via GitHub Security Advisories.

Include the affected version, steps to reproduce, impact, and any proof of concept. Please do not open public issues for security reports. Please note: this project does not provide financial rewards or bounties.

In scope: Play Store releases of the Android app. Other distribution channels are out of scope.

We aim to respond within 72 hours. Fixes will ship in the next release or within 90 days, whichever comes first.

We support coordinated disclosure and will work with reporters on a reasonable timeline.

We may acknowledge valid reports in release notes, unless you request otherwise.