Trackify is designed from the ground up to be 100% offline and private:

• No network calls — the app never connects to any server
• No analytics or tracking — zero telemetry
• SMS data stays local — bank SMS are read and stored only on your device
• Biometric data never accessed — App Lock delegates entirely to Android BiometricPrompt; Trackify never reads or stores your fingerprint or face data
• No cloud sync — backups are exported as local files only

If you discover a security vulnerability, please do not open a public issue.

Instead, email: security@[your-domain].com (replace with your actual email)

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

You will receive a response within 48 hours. If the issue is confirmed, a patch will be released as soon as possible.