Security and privacy policy

Habit Guard handles pictures of your face and hands, so privacy problems are security problems.

Reporting a vulnerability

Please do not open a public issue. Use GitHub's private vulnerability reporting instead: report a vulnerability.

Examples of what to report privately:

any way for camera pictures to be saved, sent or exposed,
network access of any kind from the application,
a way to run commands through the speech phrase or other settings,
a malformed settings or statistics file that does more than fall back to defaults.

Only the latest release and the main branch are supported while the project is in alpha.

They are listed, with how each one is verified, in docs/privacy.md.