Security
Simon Rasin · Czechia
Security design
The app is designed for local study: it has no developer-operated profile server, advertising SDK or progress upload. The app container and iOS security mechanisms restrict ordinary app-data access. The app and widget use a dedicated shared group only for the widget snapshot. These measures reduce data transmission but are not an independent certification or a guarantee of absolute protection.
Purchase security
StoreKit verifies purchases; editing a progress file is not a Pro purchase. Keychain stores local verification constraints, including dates and transaction identifiers, without enabling synchronisation for these records. The app does not ask you to enter an Apple password or payment card in an app-owned form.
Backups and your screen
Progress export is regular JSON without app-level encryption. System backups, access to cloud files, device locking and email access depend on your settings and selected services. People who can see the screen may see widget data and notification text. Remove the widget or disable its activity publication and reminders if this is unwanted.
Report a vulnerability
Email murchalasimon2000@gmail.com with “Security” in the subject. Describe the affected version, expected and actual behaviour and minimal reproduction steps. Use your own test data and screenshots without personal information. Do not send live passwords, codes, payment details or other people’s progress. Testing on other people’s devices or accounts without permission is not needed to submit a report.
We use the report to investigate and fix the issue. If a security incident is identified, further action and notifications depend on the facts and applicable obligations; no completed penetration test or guaranteed fix deadline is claimed in advance.
What you can do
Use a device lock, an up-to-date iOS version and official App Store or TestFlight builds. Do not share a progress backup publicly. Review access to the email account that receives support replies. Use Apple’s official tools to secure your Apple Account rather than links in untrusted messages.