Security fixes go into the latest release on the main branch.

Please do not open a public issue for security problems. Email hello@likwiid.com with:

• what you found and where (file or screen);
• steps to reproduce, or a proof of concept;
• the impact you expect.

You should get a reply within a week. Once a fix is ready we will publish it and credit you in the release notes, unless you prefer to stay anonymous.

WOOP stores personal goals, obstacles and plans on the device. It has no internet permission, so reports about the following are especially welcome:

• any way data could leave the device (backups, exports, intents, logs);
• other apps reading WOOP's data, reminders or notifications;
• reminders or alarms that fire with content on the lock screen when they should not.

The app has no server, account or sync, so there is no backend to report on.