Only the latest released App Store version of the app receives security fixes.

Please do not open a public issue for security problems.

Use GitHub's private vulnerability reporting instead: Report a vulnerability — only the maintainers will see the report.

What to include:

• which data/features are affected;
• reproduction steps or a PoC;
• app version and platform.

You can expect an initial response within a few days. Once a fix ships, the vulnerability is disclosed in an advisory crediting the reporter (unless you prefer otherwise).

Note: Centry stores all financial data locally on the device (SQLite + MMKV) and makes no network requests carrying personal or financial data. The most sensitive surfaces are on-device storage, the App Group shared with the widget, and (if enabled) the anonymous exchange-rate fetch.