Responsible disclosure

If you believe you have found a security vulnerability in Mydle, please tell us so we can investigate and fix it.

How to report

Email security@mydle.app with a clear description, steps to reproduce, and impact. Do not include customer data or credentials in the report.

What we ask

• Give us a reasonable time to respond before public disclosure.
• Avoid privacy violations, destruction of data, or service disruption.
• Do not access accounts or data that are not yours.

What we will do

We will acknowledge receipt, investigate in good faith, and keep you updated when we have something concrete to share. A formal bug bounty program is not currently available; reports are handled through this responsible disclosure process.

See also our Security Policy and Trust center.