Skip to content

Security: mrdarksidetm/Wallet-Flutter

Security

SECURITY.md

πŸ›‘οΈ Security Policy

We take the security of Project Wallet and its users' financial data very seriously. πŸ”’πŸ¦


πŸ”’ Offline-First Guarantee

Project Wallet is built with an Offline-First philosophy.

  • Local Storage: All your transaction data, account details, and personal info are stored locally on your device using the Isar NoSQL Database. πŸ“²
  • No Cloud Sync: By default, no data is ever transmitted to a central server or cloud provider. Your data stays where it belongs: with you. πŸ™…β€β™‚οΈβ˜οΈ

πŸ›‘οΈ Supported Versions

We provide security updates for the following versions of Project Wallet:

Version Supported
1.3.x βœ… Active
1.2.x ⚠️ End of Life
< 1.2.0 ❌ Not Supported

🚨 Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly. πŸ“§

  1. Do not open a public issue.
  2. Email us directly at security@mrdarksidetm.com (Placeholder).
  3. Provide a detailed description of the issue and steps to reproduce.

We will acknowledge your report within 48 hours and provide a timeline for a fix. ⏳


πŸ”‘ Security Features

  • Biometric Authentication: Support for Fingerprint and Face Unlock via local_auth. 🀳
  • Encrypted Backups: (Planned) AES-256 encryption for manual database exports. πŸ”
  • Secure Storage: Sensitive preferences are stored using flutter_secure_storage. πŸ—οΈ

Stay safe, stay private. πŸ›‘οΈβœ¨

There aren't any published security advisories