At Aarini, the privacy and security of our users' health data are our absolute highest priorities. Because Aarini handles sensitive information regarding women's hormonal wellness, cycles, and personal insights, we are deeply committed to resolving any security vulnerabilities quickly and responsibly.
We recommend all users and contributors stay on the latest version of the repository. Security updates are actively maintained on the main branch.
| Version / Branch | Supported |
|---|---|
main |
✅ |
If you discover a security vulnerability—especially anything pertaining to the Firebase Authentication or Firestore database rules that might compromise user privacy—we deeply appreciate your help in disclosing it to us responsibly.
Please DO NOT report security vulnerabilities via public GitHub issues.
Instead, please report them privately to ensure the safety of our users while we work on a fix:
- GitHub Security Advisory: Navigate to the "Security" tab of this repository and click "Report a vulnerability" to open a private advisory directly with the maintainers.
- Direct Contact: If you have the maintainer's direct contact information, please reach out privately.
- A descriptive title for the vulnerability.
- A detailed description of the vulnerability and its potential impact on user data privacy.
- Steps to reproduce the issue (code snippets, logs, or screenshots).
- Any potential mitigation or fix if you have one in mind.
- Acknowledgement: We will acknowledge receipt of your vulnerability report within 48 hours.
- Assessment: We aim to triage and provide a preliminary assessment within 7 days.
- Action: If a patch is required, we will prioritize it above all feature development to protect our community.
Thank you for helping us keep Aarini a safe, secure, and private companion for women everywhere. 💜