MoneyBug holds people's client details, invoices and time, so security problems are taken seriously. If you think you've found one, thank you for reporting it privately.

Please don't report security problems in public issues or Discussions. Instead, use Report a vulnerability on this repository's Security tab, or email support@oddforms.com with "Security" in the subject.

Helpful things to include:

• What the problem is, and what someone could do with it
• The steps to reproduce it
• Your macOS version and MoneyBug version

Please don't include anyone's real client data, and don't access data that isn't yours.

The MoneyBug app for Mac, including its local library, backups and their encryption, Sync with iCloud, and the app lock.

• I'll confirm I've received your report, usually within a few days. MoneyBug is made by one person, so please allow some time.
• I'll let you know what I find, and when a fix ships in an update.
• Please give me a reasonable chance to release a fix before sharing details publicly. I'm glad to credit you in the release notes if you'd like.

There's no bug bounty.