Skip to content

Security: dheeraz101/Notekar-Android

SECURITY.md

Security Policy: NoteKar Android

NoteKar Android prioritizes app security and user privacy. Because NoteKar Android is an offline-first application using local Isar and SharedPreferences storage, all user timestamps and notes remain locally on the user's device.


Supported Versions

Security updates and patches are provided for the following active channels:

Version Channel Supported
Latest Active Release (v7.x) ✅
Active Beta Channel ✅
Older Legacy Releases ❌

Reporting a Vulnerability

If you discover a security vulnerability or privacy leak in NoteKar Android, please do not open a public issue on GitHub. Report it privately to the maintainer:

Please Include:

  • Description of the vulnerability and potential security impact.
  • Clear steps to reproduce or minimal proof-of-concept.
  • Android OS version, build tag, and device model.
  • ⚠️ Redaction Notice: Please ensure you do not include personal notes, private timestamps, tokens, credentials, or sensitive device logs in your report.

The maintainer will review reports on a best-effort basis and prioritize actionable patches in subsequent builds.

There aren't any published security advisories