Please do not open a public issue for security vulnerabilities.

Instead, send a private report via GitHub's Security Advisories feature (Repository → Security → Report a vulnerability) or contact the maintainer directly.

Please include:

• A description of the vulnerability and its impact
• Steps to reproduce (device, Android version, app version)
• Suggested fix, if you have one

You can expect an acknowledgement within 72 hours and a detailed response as soon as possible after that. We will keep you informed of progress toward a fix and coordinate a responsible disclosure timeline before any public announcement.

This project uses no credentials, API keys, or external services beyond loading public OpenStreetMap tiles. If you find code that sends data anywhere unexpected, report it as a security issue.