Security overview · Updated 25 August 2026
Protection model
- Request only the permissions and content needed for the feature a person chooses.
- Protect locally saved records with platform security controls and clear export boundaries.
- Use authenticated, encrypted connections for network features and protect sensitive service credentials.
- Validate request shape and size, limit abuse, separate environments, and keep secrets out of source code.
- Redact credentials and private case content from operational logs.
- Treat account deletion, retention, backups, and recovery as security controls—not administrative afterthoughts.
Data boundaries
A feature should not receive unrelated device content simply because another permission was granted. Connected services are reviewed for narrow access, encryption, retention, notification privacy, and deletion. Public disclosures must match the network behavior of the released build.
Release assurance
- Threat-model identity, Trusted Circle, backup, recovery, and payment-adjacent flows.
- Run dependency, secret, static-analysis, migration, retention, and account-deletion checks.
- Review production secrets, backup and restore, monitoring, alerting, and incident response.
- Reconcile the Apple privacy manifest, App Store privacy answers, website policies, vendors, and actual network behavior.
- Use independent mobile and API security testing as part of the release assurance process.
Responsible disclosure
Please do not post exploit details or personal data publicly. Authorized testers should use the verified private reporting channel supplied with their access. A public private-reporting route and response target will be published here before general app distribution. Include the affected surface, reproduction steps, and impact without attaching credentials or personal case evidence.
Safety boundary
PauseSure is decision support and cannot guarantee that a person, message, link, or transaction is safe. If money or credentials may be at risk, stop contact and reach the relevant organization through an official channel you locate independently.